commit | 2405f3c0d19eb4d516a88aa4e5c54e5f9c6bbea3 | [log] [tgz] |
---|---|---|
author | Dr. David Alan Gilbert <dgilbert@redhat.com> | Tue Dec 03 12:23:44 2019 +0000 |
committer | Dr. David Alan Gilbert <dgilbert@redhat.com> | Thu Jan 23 16:41:37 2020 +0000 |
tree | c9effc0c7a1f5186ff07df3ea0e25c10eb9f6e26 | |
parent | f779bc5265e7e7abb13a03d4bfbc74151afc15c2 [diff] |
virtiofsd: cap-ng helpers libcap-ng reads /proc during capng_get_caps_process, and virtiofsd's sandboxing doesn't have /proc mounted; thus we have to do the caps read before we sandbox it and save/restore the state. Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com> Reviewed-by: Daniel P. Berrangé <berrange@redhat.com> Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>