proxmox-mirrors/mirror_lxc
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_lxc synced 2025-07-12 17:55:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

warn about insufficient permissions

Browse Source 
With this patch, if an unprivileged user has $HOME 700 or
750 and does

lxc-start -n c1

he'll see an error like:

lxc_container: Permission denied - could not access /home/serge.  Please grant it 'x' access, or add an ACL for t he container root.

(This addresses bug pad.lv/1277466)

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>
Acked-by: Stéphane Graber <stgraber@ubuntu.com>
This commit is contained in:
Serge Hallyn 2014-02-10 16:57:08 -06:00 committed by Stéphane Graber
parent ffeb76b460
commit bbd23aa0bb
1 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
src/lxc/conf.c
View File

@ -753,6 +753,31 @@ static int lxc_mount_auto_mounts(struct lxc_conf *conf, int flags, struct lxc_ha
return 0; return 0;
} }
static void print_top_failing_dir(const char *path)
{
size_t len = strlen(path);
char *copy = alloca(len+1), *p, *e, saved;
strcpy(copy, path);
p = copy;
e = copy + len;
while (p < e) {
while (p < e && *p == '/') p++;
while (p < e && *p != '/') p++;
if (p >= e)
return;
saved = *p;
*p = '\0';
if (access(copy, X_OK)) {
SYSERROR("could not access %s. Please grant it 'x' " \
"access, or add an ACL for the container root.",
copy);
return;
}
*p = saved;
}
}
static int mount_rootfs(const char *rootfs, const char *target, const char *options) static int mount_rootfs(const char *rootfs, const char *target, const char *options)
{ {
char absrootfs[MAXPATHLEN]; char absrootfs[MAXPATHLEN];
@ -1546,6 +1571,11 @@ static int setup_rootfs(struct lxc_conf *conf)
return -1; return -1;
} }
if (access(rootfs->path, R_OK)) {
print_top_failing_dir(rootfs->path);
return -1;
}
if (detect_shared_rootfs()) { if (detect_shared_rootfs()) {
if (chroot_into_slave(conf)) { if (chroot_into_slave(conf)) {
ERROR("Failed to chroot into slave /"); ERROR("Failed to chroot into slave /");