moby--moby/runtime/execdriver/lxc
Kevin Wallace c94111b619 Allow non-privileged containers to create device nodes.
Such nodes could already be created by importing a tarball to a container; now
they can be created from within the container itself.

This gives non-privileged containers the mknod kernel capability, and modifies
their cgroup settings to allow creation of *any* node, not just whitelisted
ones.  Use of such nodes is still controlled by the existing cgroup whitelist.

Docker-DCO-1.1-Signed-off-by: Kevin Wallace <kevin@pentabarf.net> (github: kevinwallace)
2014-04-03 18:44:13 +00:00
..
driver.go Ensure a reliable way to kill ghost containers on reboot 2014-04-01 07:11:41 +00:00
info.go Move execdrivers into runtime top level pkg 2014-03-17 11:40:12 -07:00
info_test.go Move execdrivers into runtime top level pkg 2014-03-17 11:40:12 -07:00
init.go Allow non-privileged containers to create device nodes. 2014-04-03 18:44:13 +00:00
lxc_init_linux.go Move execdrivers into runtime top level pkg 2014-03-17 11:40:12 -07:00
lxc_init_unsupported.go Move execdrivers into runtime top level pkg 2014-03-17 11:40:12 -07:00
lxc_template.go Allow non-privileged containers to create device nodes. 2014-04-03 18:44:13 +00:00
lxc_template_unit_test.go Add --opt arguments for drivers 2014-03-27 21:47:47 +01:00