man: virsh: Document lxc-enter-namespace --noseclabel

https://bugzilla.redhat.com/show_bug.cgi?id=1147737
This commit is contained in:
Cole Robinson 2016-04-11 17:02:25 -04:00
parent ea9c3da452
commit 0f8be2531c

View File

@ -4182,7 +4182,7 @@ When I<--timestamp> is used, a human-readable timestamp will be printed
before the event, and the timing information provided by QEMU will be before the event, and the timing information provided by QEMU will be
omitted. omitted.
=item B<lxc-enter-namespace> I<domain> -- /path/to/binary [arg1, [arg2, ...]] =item B<lxc-enter-namespace> I<domain> [I<--noseclabel>] -- /path/to/binary [arg1, [arg2, ...]]
Enter the namespace of I<domain> and execute the command C</path/to/binary> Enter the namespace of I<domain> and execute the command C</path/to/binary>
passing the requested args. The binary path is relative to the container passing the requested args. The binary path is relative to the container
@ -4191,6 +4191,10 @@ environment variables / console visible to virsh. This command only works
when connected to the LXC hypervisor driver. This command succeeds only when connected to the LXC hypervisor driver. This command succeeds only
if C</path/to/binary> has 0 exit status. if C</path/to/binary> has 0 exit status.
By default the new process will run with the security label of the new
parent container. Use the I<--noseclabel> option to instead have the
process keep the same security label as C<virsh>.
=back =back
=head1 ENVIRONMENT =head1 ENVIRONMENT