diff --git a/ignore_cgroup2_mountpoint.patch b/ignore_cgroup2_mountpoint.patch new file mode 100644 index 0000000..6937db6 --- /dev/null +++ b/ignore_cgroup2_mountpoint.patch @@ -0,0 +1,13 @@ +diff --git a/libcontainer/cgroups/utils.go.orig b/libcontainer/cgroups/utils.go +index 8946dd5..c6db003 100644 +--- a/libcontainer/cgroups/utils.go.orig ++++ b/libcontainer/cgroups/utils.go +@@ -149,7 +149,7 @@ func getCgroupMountsHelper(ss map[string]bool, mi io.Reader, all bool) ([]Mount, + if sepIdx == -1 { + return nil, fmt.Errorf("invalid mountinfo format") + } +- if txt[sepIdx+3:sepIdx+9] != "cgroup" { ++ if txt[sepIdx+3:sepIdx+10] == "cgroup2" || txt[sepIdx+3:sepIdx+9] != "cgroup" { + continue + } + fields := strings.Split(txt, " ") diff --git a/runc.changes b/runc.changes index 191af06..160d4a2 100644 --- a/runc.changes +++ b/runc.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Wed Mar 29 15:47:52 UTC 2017 - jmassaguerpla@suse.com + +- fix bsc#1028113 - runc: make sure to ignore cgroup v2 mountpoints + ------------------------------------------------------------------- Fri Feb 24 18:08:10 UTC 2017 - jmassaguerpla@suse.com diff --git a/runc.spec b/runc.spec index bbc552c..9458375 100644 --- a/runc.spec +++ b/runc.spec @@ -58,6 +58,7 @@ Group: System/Management Url: https://github.com/opencontainers/runc Source: %{name}-git.%{git_version}.tar.xz Patch0: CVE-2016-9962.patch +Patch1: ignore_cgroup2_mountpoint.patch BuildRequires: fdupes %ifarch %go_arches BuildRequires: go >= 1.5 @@ -104,6 +105,9 @@ Test package for runc. It contains the source code and the tests. %prep %setup -q -n %{name}-git.%{git_version} %patch0 -p1 +%if 0%{?suse_version} > 1320 +%patch1 -p1 +%endif %build # Do not use symlinks. If you want to run the unit tests for this package at