From: Gao feng Date: Tue, 16 Jul 2013 02:00:05 +0000 (+0800) Subject: LXC: Change the owner of host devices to the root of container X-Git-Url: http://xenbits.xensource.com/gitweb?a=commitdiff_plain;h=7a8212aac96e9d4aef1d376c2ae89af2203d917a;p=people%2Fliuw%2Flibxenctrl-split%2Flibvirt.git LXC: Change the owner of host devices to the root of container These host devices are created for container, the owner should be the root user of container. Signed-off-by: Gao feng --- diff --git a/src/lxc/lxc_controller.c b/src/lxc/lxc_controller.c index dbb053a6e..ce1f941c5 100644 --- a/src/lxc/lxc_controller.c +++ b/src/lxc/lxc_controller.c @@ -1348,6 +1348,9 @@ virLXCControllerSetupHostdevSubsysUSB(virDomainDefPtr vmDef, goto cleanup; } + if (lxcContainerChown(vmDef, dstfile) < 0) + goto cleanup; + if (virSecurityManagerSetHostdevLabel(securityDriver, vmDef, def, vroot) < 0) goto cleanup; @@ -1425,6 +1428,9 @@ virLXCControllerSetupHostdevCapsStorage(virDomainDefPtr vmDef, goto cleanup; } + if (lxcContainerChown(vmDef, dst) < 0) + goto cleanup; + def->source.caps.u.storage.block = dst; if (virSecurityManagerSetHostdevLabel(securityDriver, vmDef, def, NULL) < 0) goto cleanup; @@ -1501,6 +1507,9 @@ virLXCControllerSetupHostdevCapsMisc(virDomainDefPtr vmDef, goto cleanup; } + if (lxcContainerChown(vmDef, dst) < 0) + goto cleanup; + def->source.caps.u.misc.chardev = dst; if (virSecurityManagerSetHostdevLabel(securityDriver, vmDef, def, NULL) < 0) goto cleanup;