1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
moby--moby/container
Kenfe-Mickael Laventure b4963c87b2 Prevent mqueue from implicitely becoming a bind mount with --ipc=host
Currently, when running a container with --ipc=host, if /dev/mqueue is
a standard directory on the hos the daemon will bind mount it allowing
the container to create/modify files on the host.

This commit forces /dev/mqueue to always be of type mqueue except when
the user explicitely requested something to be bind mounted to
/dev/mqueue.

Signed-off-by: Kenfe-Mickael Laventure <mickael.laventure@gmail.com>
(cherry picked from commit f7d4abdc00)

From PR #20133
2016-02-10 12:58:27 -05:00
..
archive.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
container.go Merge pull request #19121 from WeiZhang555/tty-resize 2016-01-11 11:29:15 -05:00
container_unit_test.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
container_unix.go Prevent mqueue from implicitely becoming a bind mount with --ipc=host 2016-02-10 12:58:27 -05:00
container_windows.go Modify import paths to point to the new engine-api package. 2016-01-06 19:48:59 -05:00
history.go Extract container store from the daemon. 2016-01-26 12:58:54 -08:00
memory_store.go Extract container store from the daemon. 2016-01-26 12:58:54 -08:00
memory_store_test.go Extract container store from the daemon. 2016-01-26 12:58:54 -08:00
monitor.go only close LogDriver after LogCopier is done 2016-01-26 12:58:46 -08:00
state.go Forbid exec a restarting container 2016-01-27 10:29:56 -08:00
state_test.go Move Container to its own package. 2015-12-03 17:39:49 +01:00
state_unix.go Move Container to its own package. 2015-12-03 17:39:49 +01:00
state_windows.go Move Container to its own package. 2015-12-03 17:39:49 +01:00
store.go Extract container store from the daemon. 2016-01-26 12:58:54 -08:00