mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2025-02-21 19:02:25 +00:00
Set mknod permission in device ACL for LXC USB devices
The LXC controller itself needs to mknod the USB device node in /dev/bus/usb, so we can't block mknod permission from the cgroup. Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
This commit is contained in:
parent
a457fc6550
commit
916b147cc8
@ -325,7 +325,7 @@ virLXCSetupHostUSBDeviceCgroup(virUSBDevicePtr dev ATTRIBUTE_UNUSED,
|
||||
|
||||
VIR_DEBUG("Process path '%s' for USB device", path);
|
||||
if (virCgroupAllowDevicePath(cgroup, path,
|
||||
VIR_CGROUP_DEVICE_RW) < 0)
|
||||
VIR_CGROUP_DEVICE_RWM) < 0)
|
||||
return -1;
|
||||
|
||||
return 0;
|
||||
@ -341,7 +341,7 @@ virLXCTeardownHostUSBDeviceCgroup(virUSBDevicePtr dev ATTRIBUTE_UNUSED,
|
||||
|
||||
VIR_DEBUG("Process path '%s' for USB device", path);
|
||||
if (virCgroupDenyDevicePath(cgroup, path,
|
||||
VIR_CGROUP_DEVICE_RW) < 0)
|
||||
VIR_CGROUP_DEVICE_RWM) < 0)
|
||||
return -1;
|
||||
|
||||
return 0;
|
||||
|
Loading…
x
Reference in New Issue
Block a user