diff options
| author | Etienne CHAMPETIER <champetier.etienne@gmail.com> | 2016-12-29 18:08:58 -0800 |
|---|---|---|
| committer | John Crispin <john@phrozen.org> | 2017-01-10 09:23:35 +0100 |
| commit | f7069032290a9720142b2ee2c6315d7e1f1a1bd3 (patch) | |
| tree | 3947e5bfea2b095fddeec7c3e03faf5faf61d8fd | |
| parent | f800ecf860addd4fc7f1acde76a9adbd4b1f50e7 (diff) | |
| download | procd-f7069032290a9720142b2ee2c6315d7e1f1a1bd3.tar.gz | |
ujail: add basic /dev files
This adds
/dev/full
/dev/null
/dev/urandom
/dev/zero
in every jail (not having them only allow subtle bugs)
Signed-off-by: Etienne CHAMPETIER <champetier.etienne@gmail.com>
| -rw-r--r-- | jail/jail.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/jail/jail.c b/jail/jail.c index 834d677..8e7cddc 100644 --- a/jail/jail.c +++ b/jail/jail.c @@ -398,6 +398,11 @@ int main(int argc, char **argv) uloop_init(); if (opts.namespace) { + add_mount("/dev/full", 0, -1); + add_mount("/dev/null", 0, -1); + add_mount("/dev/urandom", 0, -1); + add_mount("/dev/zero", 0, -1); + int flags = CLONE_NEWPID | CLONE_NEWNS | CLONE_NEWIPC | SIGCHLD; if (opts.hostname) flags |= CLONE_NEWUTS; |