Donghwa Jeong
3de9fb4c2f
fix getgrgid() thread safe issue
...
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-14 19:06:11 +09:00
Donghwa Jeong
cb7aa5e8ca
fix getpwuid() thread safe issue
...
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-14 15:32:03 +09:00
Donghwa Jeong
db8b325a3c
coverity: #1436916
...
Resource leak
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-14 10:36:46 +09:00
Christian Brauner
2b65c74cf9
pam: fix typo
...
fixes commit 2dce415b62
("fix getpwnam() thread safe issue")
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
2018-06-12 15:05:44 +02:00
Christian Brauner
5465e67305
Merge pull request #2397 from 2xsec/bugfix
...
attach: fix double free
2018-06-12 11:31:37 +02:00
Donghwa Jeong
d35b372aaf
attach: fix double free
...
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-12 18:16:35 +09:00
Christian Brauner
052bb7ee2a
Merge pull request #2396 from 2xsec/bugfix
...
fix getpwnam() thread safe issue
2018-06-12 11:16:01 +02:00
Donghwa Jeong
2dce415b62
fix getpwnam() thread safe issue
...
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-12 17:09:13 +09:00
Stéphane Graber
c6d0d3cb30
Merge pull request #2395 from brauner/2018-06-11/restore_old_create_behavior
...
tools: restore lxc-create log behavior
2018-06-11 10:56:55 -04:00
Christian Brauner
70cf337625
tools: restore lxc-create log behavior
...
Older versions of lxc-create used to set log_file to "none" when a log priority
but no log file was specified on the command line. Let's restore this behavior.
Closes #2392 .
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
2018-06-11 13:16:40 +02:00
Christian Brauner
9dbff50152
Merge pull request #2393 from 2xsec/bugfix
...
arguments: improve some operations
2018-06-11 12:25:40 +02:00
Christian Brauner
cebc88c191
Merge pull request #2394 from 2xsec/coverity
...
coverity: #1425747
2018-06-11 12:20:57 +02:00
Donghwa Jeong
928388738b
coverity: #1425801
...
Resource leak
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-11 15:13:58 +09:00
Donghwa Jeong
7177e6b155
coverity: #1425781
...
Resource leak
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-11 14:51:16 +09:00
Donghwa Jeong
8f55c74292
coverity: #1425747
...
Resource leak
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-11 11:24:46 +09:00
Donghwa Jeong
97d7e88f9a
arguments: improve some operations
...
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-11 11:10:58 +09:00
Christian Brauner
a810dc80dd
Merge pull request #2389 from 3XX0/terminal-output-processing
...
terminal: enable local output processing
2018-06-10 17:34:20 +02:00
Christian Brauner
79fcf75940
Merge pull request #2390 from 3XX0/conf-no-force-shadow
...
conf: only use newuidmap and newgidmap when necessary
2018-06-10 17:34:00 +02:00
Christian Brauner
287c5df906
Merge pull request #2391 from harryoooooooooo/master
...
fix bug: unpriv lxc will run lxc.net.[i].script.up now
2018-06-10 17:33:38 +02:00
harryoooooooooo
4d7816815b
fix bug: unpriv lxc will run lxc.net.[i].script.up now
...
Signed-off-by: harryoooooooooo <ymsc27884@gmail.com>
2018-06-09 19:31:55 +08:00
Jonathan Calmels
c724025c50
conf: only use newuidmap and newgidmap when necessary
...
Signed-off-by: Jonathan Calmels <jcalmels@nvidia.com>
2018-06-08 17:12:25 -07:00
Jonathan Calmels
300ec7176b
terminal: enable local output processing
...
Signed-off-by: Jonathan Calmels <jcalmels@nvidia.com>
2018-06-08 17:10:01 -07:00
Christian Brauner
9b7f09d1d6
Merge pull request #2388 from 2xsec/coverity
...
coverity: #1425811
2018-06-08 15:17:32 +02:00
Donghwa Jeong
aa7c5841bd
coverity: #1425811
...
Resource leak
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-08 22:03:37 +09:00
Christian Brauner
7e0997c7ec
Merge pull request #2387 from 2xsec/coverity
...
coverity: #1425753
2018-06-08 14:58:08 +02:00
Donghwa Jeong
98c7c8eb1f
coverity: #1425753
...
Copy into fixed size buffer
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-08 21:37:48 +09:00
Christian Brauner
21e20322cf
Merge pull request #2385 from 2xsec/coverity
...
coverity: #1425836
2018-06-08 11:12:28 +02:00
Donghwa Jeong
80758b4b2a
coverity: #1425836
...
Resource leak
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-08 16:38:56 +09:00
Christian Brauner
0b4ffe744d
Merge pull request #2384 from 2xsec/bugfix
...
pam_cgfs: fix Logically dead code.
2018-06-08 08:00:41 +02:00
Christian Brauner
7568a48f0b
Merge pull request #2383 from 2xsec/coverity
...
coverity: #1425849 , #1425821 , #1425794 , #1425779 , #1425777 , #1425795 , #1425841
2018-06-08 08:00:06 +02:00
Donghwa Jeong
8c440b3af0
pam_cgfs: fix Logically dead code.
...
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-08 14:16:53 +09:00
Donghwa Jeong
dcea4a23cd
coverity: #1425849
...
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-08 11:22:18 +09:00
Donghwa Jeong
409842faff
coverity: #1425841
...
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-08 11:20:08 +09:00
Donghwa Jeong
4b696f90fe
coverity: #1425821
...
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-08 11:18:25 +09:00
Donghwa Jeong
d5329db148
coverity: #1425795
...
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-08 11:16:31 +09:00
Donghwa Jeong
1e9cf48057
coverity: #1425794
...
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-08 11:14:40 +09:00
Donghwa Jeong
951665a30e
coverity: #1425779
...
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-08 11:12:52 +09:00
Donghwa Jeong
1b611563ca
coverity: #1425777
...
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-08 11:11:03 +09:00
Stéphane Graber
7b2352c76d
Merge pull request #2378 from brauner/2018-06-05/revert_seccomp_strict
...
Revert "seccomp: make do_resolve_add_rule() more strict"
2018-06-06 16:29:45 -04:00
Christian Brauner
8c26014b0c
seccomp: replace misleading warning messages
...
Reported-by: Felix Abecassis <fabecassis@nvidia.com>
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
2018-06-06 13:14:20 +02:00
Christian Brauner
1716351ab9
Merge pull request #2381 from stgraber/master
...
Fix typo
2018-06-05 23:15:46 +02:00
Stéphane Graber
46210729c5
Fix typo
...
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2018-06-05 17:13:57 -04:00
Christian Brauner
24b9874f79
Revert "seccomp: make do_resolve_add_rule() more strict"
...
This reverts commit dfddc8aa7e
.
Closes #2376 .
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
2018-06-05 11:21:23 +02:00
Christian Brauner
06b44d05bd
Merge pull request #2377 from 2xsec/bugfix
...
conf: change some logs to print errno
2018-06-05 10:53:16 +02:00
Donghwa Jeong
fea3b91d09
conf: change some logs to print errno
...
Signed-off-by: Donghwa Jeong <dh48.jeong@samsung.com>
2018-06-05 14:43:48 +09:00
Serge Hallyn
2095b6d83a
Merge pull request #2374 from brauner/2018-06-04/fix_remount_all_slave
...
conf: copy mountinfo for remount_all_slave()
2018-06-04 09:36:43 -05:00
Christian Brauner
fe96566a4b
Merge pull request #2362 from duguhaotian/work
...
support tls in cross-compile
2018-06-04 13:39:24 +02:00
duguhaotian
8d6aae92d3
support tls in cross-compile
...
AC_RUN_IFELSE will fail in cross-compile,
we can use AC_COMPILE_IFELSE replace.
Signed-off-by: duguhaotian <duguhaotian@gmail.com>
2018-06-04 19:42:23 +08:00
Christian Brauner
6a49f05eb8
conf: copy mountinfo for remount_all_slave()
...
While a container reads mountinfo from proc fs, the mountinfo can be changed by
the kernel anytime. This has caused critical issues on some devices.
Signed-off-by: Donghwa Jeong dh48.jeong@samsung.com
Reported-by: Donghwa Jeong dh48.jeong@samsung.com
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
2018-06-04 13:15:16 +02:00
Christian Brauner
224d1fd25f
Merge pull request #2372 from flx42/more-seccomp-fixes
...
More seccomp fixes
2018-06-02 03:11:59 +02:00