1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
moby--moby/daemon/execdriver
Dan Walsh 1e64264697 Make mqueue container specific
mqueue can not be mounted on the host os and then shared into the container.
There is only one mqueue per mount namespace, so current code ends up leaking
the /dev/mqueue from the host into ALL containers.  Since SELinux changes the
label of the mqueue, only the last container is able to use the mqueue, all
other containers will get a permission denied.  If you don't have SELinux protections
sharing of the /dev/mqueue allows one container to interact in potentially hostile
ways with other containers.

Signed-off-by: Dan Walsh <dwalsh@redhat.com>
(cherry picked from commit ba38d58659)

From PR #19876
2016-02-10 11:29:58 -05:00
..
execdrivers daemon: remove sysInitPath, lxc leftover 2015-11-30 10:04:13 +01:00
native Make mqueue container specific 2016-02-10 11:29:58 -05:00
windows Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
driver.go Implemet docker update command 2015-12-28 19:19:26 +08:00
driver_unix.go Choose default-cgroup parent by cgroup driver 2016-01-07 08:56:26 -08:00
driver_windows.go Move Config and HostConfig from runconfig to types/container. 2015-12-22 13:34:30 -05:00
pipes.go Fix golint warnings for daemon/execdriver/* 2015-07-28 08:43:22 +08:00
termconsole.go Add user namespace (mapping) support to the Docker engine 2015-10-09 17:47:37 -04:00
utils_unix.go Don't build utils on Windows 2015-11-07 08:46:36 -08:00