1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
moby--moby/daemon
Kenfe-Mickael Laventure b4963c87b2 Prevent mqueue from implicitely becoming a bind mount with --ipc=host
Currently, when running a container with --ipc=host, if /dev/mqueue is
a standard directory on the hos the daemon will bind mount it allowing
the container to create/modify files on the host.

This commit forces /dev/mqueue to always be of type mqueue except when
the user explicitely requested something to be bind mounted to
/dev/mqueue.

Signed-off-by: Kenfe-Mickael Laventure <mickael.laventure@gmail.com>
(cherry picked from commit f7d4abdc00)

From PR #20133
2016-02-10 12:58:27 -05:00
..
daemonbuilder
events
exec Fix race condition in execCommandGC 2016-01-26 12:58:49 -08:00
execdriver Make mqueue container specific 2016-02-10 11:29:58 -05:00
graphdriver Fix ZFS permissions bug with user namespaces 2016-02-10 11:29:01 -05:00
links
logger only close LogDriver after LogCopier is done 2016-01-26 12:58:46 -08:00
network
archive.go
archive_unix.go
archive_windows.go
attach.go
changes.go
commit.go
config.go Make sure flat options are not parsed as config structures. 2016-02-02 15:37:14 -05:00
config_experimental.go Move userns support out of experimental into master 2016-01-08 15:06:22 -05:00
config_stub.go
config_test.go Verify that the configuration keys in the file are valid. 2016-01-26 12:58:53 -08:00
config_unix.go Allow network configuration via daemon config file. 2016-01-26 12:59:00 -08:00
config_windows.go Allow network configuration via daemon config file. 2016-01-26 12:59:00 -08:00
container_operations.go
container_operations_unix.go Prevent mqueue from implicitely becoming a bind mount with --ipc=host 2016-02-10 12:58:27 -05:00
container_operations_windows.go Allow network configuration via daemon config file. 2016-01-26 12:59:00 -08:00
create.go Reject multiple networks on container creation 2016-01-26 12:58:58 -08:00
create_unix.go Allow external volume drivers to host anonymous volumes and copy existing data from image. 2016-01-26 12:58:53 -08:00
create_windows.go Allow external volume drivers to host anonymous volumes and copy existing data from image. 2016-01-26 12:58:53 -08:00
daemon.go Don’t stop daemon on migration hard failure 2016-02-09 13:09:07 -08:00
daemon_experimental.go Move userns support out of experimental into master 2016-01-08 15:06:22 -05:00
daemon_linux.go
daemon_linux_test.go
daemon_stub.go Move userns support out of experimental into master 2016-01-08 15:06:22 -05:00
daemon_test.go Remove cluster storage advertise from reload. 2016-01-27 10:29:55 -08:00
daemon_unix.go Verify cgroup-parent name for systemd cgroup 2016-01-26 12:59:00 -08:00
daemon_unix_test.go
daemon_unsupported.go
daemon_windows.go Verify cgroup-parent name for systemd cgroup 2016-01-26 12:59:00 -08:00
debugtrap_unix.go
debugtrap_unsupported.go
debugtrap_windows.go
delete.go Fix removing mountpoints on container rm fail 2016-01-26 12:58:59 -08:00
delete_test.go Extract container store from the daemon. 2016-01-26 12:58:54 -08:00
discovery.go Allow to set daemon and server configurations in a file. 2016-01-14 16:44:37 -05:00
discovery_test.go Allow to set daemon and server configurations in a file. 2016-01-14 16:44:37 -05:00
errors.go
events.go
events_test.go
exec.go Forbid exec a restarting container 2016-01-27 10:29:56 -08:00
exec_unix.go
exec_windows.go
export.go
image_delete.go Extract container store from the daemon. 2016-01-26 12:58:54 -08:00
images.go Fix image filter 2016-01-14 08:17:40 +00:00
import.go
info.go Extract container store from the daemon. 2016-01-26 12:58:54 -08:00
inspect.go Build names and links at runtime 2016-01-07 14:10:42 -05:00
inspect_unix.go
inspect_windows.go
kill.go
links.go Add migration from sqlite links back to hostConfig 2016-01-11 11:31:29 -05:00
links_test.go Extract container store from the daemon. 2016-01-26 12:58:54 -08:00
list.go Make volume dangling filter return only used volumes with dangling=false. 2016-01-27 10:29:56 -08:00
list_unix.go
list_windows.go
logdrivers_linux.go
logdrivers_windows.go
logs.go
mounts.go On container rm, don't remove named mountpoints 2016-01-26 12:58:59 -08:00
network.go Add IPAM Config Options to match libnetwork 2016-01-14 14:32:25 -05:00
pause.go
README.md
rename.go Build names and links at runtime 2016-01-07 14:10:42 -05:00
resize.go
restart.go
selinux_linux.go
selinux_unsupported.go
start.go Revert "Break big lock into some tiny locks" 2016-01-14 13:38:09 -05:00
stats.go
stats_collector_unix.go
stats_collector_windows.go
stats_freebsd.go
stats_linux.go
stats_windows.go
stop.go
top_unix.go
top_windows.go
unpause.go
update.go
volumes.go On container rm, don't remove named mountpoints 2016-01-26 12:58:59 -08:00
volumes_unit_test.go
volumes_unix.go Remove duplicated lazy volume initialization. 2016-01-13 11:22:31 -05:00
volumes_windows.go Remove duplicated lazy volume initialization. 2016-01-13 11:22:31 -05:00
wait.go

This directory contains code pertaining to running containers and storing images

Code pertaining to running containers:

  • execdriver

Code pertaining to storing images:

  • graphdriver