mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2025-01-11 07:17:44 +00:00
Ensure non-root can read /proc/meminfo file in LXC containers
By default files in a FUSE mount can only be accessed by the user which created them, even if the file permissions would otherwise allow it. To allow other users to access the FUSE mount the 'allow_other' mount option must be used. This bug prevented non-root users in an LXC container from reading the /proc/meminfo file. https://bugzilla.redhat.com/show_bug.cgi?id=967977 Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
This commit is contained in:
parent
61e672b23e
commit
922ebe4ead
@ -307,6 +307,7 @@ int lxcSetupFuse(virLXCFusePtr *f, virDomainDefPtr def)
|
||||
/* process name is libvirt_lxc */
|
||||
if (fuse_opt_add_arg(&args, "libvirt_lxc") == -1 ||
|
||||
fuse_opt_add_arg(&args, "-odirect_io") == -1 ||
|
||||
fuse_opt_add_arg(&args, "-oallow_other") == -1 ||
|
||||
fuse_opt_add_arg(&args, "-ofsname=libvirt") == -1)
|
||||
goto cleanup1;
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user