forked from pool/systemd
0e288fc9c5
- Add upstream patch 0001-machine-don-t-return-uninitialized-variable.patch - Port and add upstream patch 0002-vconsole-setup-run-setfont-before-loadkeys.patch - Rename 0001-udev-net_setup_link-add-a-bit-more-logging.patch to 1048-udev-net_setup_link-add-a-bit-more-logging.patch - Port and add upstream patches 0001-udev-net_setup_link-add-a-bit-more-logging.patch 0003-namespace-make-sure-tmp-var-tmp-and-dev-are-writable.patch 0002-namespace-fix-uninitialized-memory-access.patch - Add upstream patches 0001-architecture-Add-tilegx.patch 0002-architecture-Add-cris.patch 0003-arch-add-crisv32-to-uname-check.patch 0004-architecture-remove-cris-from-uname-list.patch - Add upstream patches 0006-hwdb-update.patch 0007-hwdb-Update-database-of-Bluetooth-company-identifier.patch - Add upstream patches 0001-parse_uid-return-ENXIO-for-1-uids.patch 0002-util-when-unescaping-strings-don-t-allow-smuggling-i.patch 0003-localed-consider-an-unset-model-as-a-wildcard.patch 0004-sd-bus-when-an-event-loop-terminates-explicitly-clos.patch OBS-URL: https://build.opensuse.org/request/show/239780 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/systemd?expand=0&rev=191
35 lines
1.2 KiB
Diff
35 lines
1.2 KiB
Diff
Based on 664064d60c36e1f62c7e9177e4c7498035467e07 Mon Sep 17 00:00:00 2001
|
|
From: Lennart Poettering <lennart@poettering.net>
|
|
Date: Thu, 3 Jul 2014 16:27:57 +0200
|
|
Subject: [PATCH] namespace: make sure /tmp, /var/tmp and /dev are writable in
|
|
namespaces we set up
|
|
|
|
---
|
|
src/core/namespace.c | 11 +++++++----
|
|
1 file changed, 7 insertions(+), 4 deletions(-)
|
|
|
|
--- src/core/namespace.c
|
|
+++ src/core/namespace.c 2014-07-04 09:55:21.582234949 +0000
|
|
@@ -263,14 +263,17 @@ static int make_read_only(BindMount *m)
|
|
|
|
assert(m);
|
|
|
|
- if (m->mode != INACCESSIBLE && m->mode != READONLY)
|
|
- return 0;
|
|
+ if (IN_SET(m->mode, INACCESSIBLE, READONLY))
|
|
+ r = mount(NULL, m->path, NULL, MS_BIND|MS_REMOUNT|MS_RDONLY|MS_REC, NULL);
|
|
+ else if (IN_SET(m->mode, READWRITE, PRIVATE_TMP, PRIVATE_VAR_TMP, PRIVATE_DEV))
|
|
+ r = mount(NULL, m->path, NULL, MS_BIND|MS_REMOUNT|MS_REC, NULL);
|
|
+ else
|
|
+ r = 0;
|
|
|
|
- r = mount(NULL, m->path, NULL, MS_BIND|MS_REMOUNT|MS_RDONLY|MS_REC, NULL);
|
|
if (r < 0 && !(m->ignore && errno == ENOENT))
|
|
return -errno;
|
|
|
|
- return 0;
|
|
+ return r;
|
|
}
|
|
|
|
int setup_namespace(
|