[gentoo-commits] repo/gentoo:master commit in: app-emulation/lxc/

public inbox for gentoo-commits@lists.gentoo.org
 help / color / mirror / Atom feed

From: "Markos Chandras" <hwoarang@gentoo.org>
To: gentoo-commits@lists.gentoo.org
Subject: [gentoo-commits] repo/gentoo:master commit in: app-emulation/lxc/
Date: Mon,  5 Oct 2015 17:11:56 +0000 (UTC)	[thread overview]
Message-ID: <1441409080.78ef1b565ae26608f11a81f2b60e4a8e404ef9c3.hwoarang@gentoo> (raw)

commit:     78ef1b565ae26608f11a81f2b60e4a8e404ef9c3
Author:     Jakub Jirutka <jakub <AT> jirutka <DOT> cz>
AuthorDate: Fri Sep  4 23:24:40 2015 +0000
Commit:     Markos Chandras <hwoarang <AT> gentoo <DOT> org>
CommitDate: Fri Sep  4 23:24:40 2015 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=78ef1b56

app-emulation/lxc: GRKERNSEC_PROC is incompatible with unprivileged containers

LXC uses newuidmap/newgidmap from the shadow package to map UIDs/GIDs
for unprivileged containers and this doesn't play well with
GRKERNSEC_PROC. You can read more details in
https://github.com/shadow-maint/shadow/commit/884895ae25f4e684b8ca75ac03e775370f43a63d

 app-emulation/lxc/lxc-1.0.6-r1.ebuild | 2 ++
 app-emulation/lxc/lxc-1.0.7.ebuild    | 2 ++
 app-emulation/lxc/lxc-1.1.0-r6.ebuild | 2 ++
 app-emulation/lxc/lxc-1.1.1-r1.ebuild | 2 ++
 app-emulation/lxc/lxc-1.1.2-r1.ebuild | 2 ++
 app-emulation/lxc/lxc-1.1.2-r2.ebuild | 2 ++
 app-emulation/lxc/lxc-1.1.2.ebuild    | 2 ++
 7 files changed, 14 insertions(+)

diff --git a/app-emulation/lxc/lxc-1.0.6-r1.ebuild b/app-emulation/lxc/lxc-1.0.6-r1.ebuild
index a9b43e5..5fcb857 100644
--- a/app-emulation/lxc/lxc-1.0.6-r1.ebuild
+++ b/app-emulation/lxc/lxc-1.0.6-r1.ebuild
@@ -56,6 +56,7 @@ CONFIG_CHECK="~CGROUPS ~CGROUP_DEVICE
 	~!GRKERNSEC_CHROOT_PIVOT
 	~!GRKERNSEC_CHROOT_CHMOD
 	~!GRKERNSEC_CHROOT_CAPS
+	~!GRKERNSEC_PROC
 "
 
 ERROR_DEVPTS_MULTIPLE_INSTANCES="CONFIG_DEVPTS_MULTIPLE_INSTANCES:	needed for pts inside container"
@@ -77,6 +78,7 @@ ERROR_GRKERNSEC_CHROOT_DOUBLE=":CONFIG_GRKERNSEC_CHROOT_DOUBLE	some GRSEC featur
 ERROR_GRKERNSEC_CHROOT_PIVOT=":CONFIG_GRKERNSEC_CHROOT_PIVOT	some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CHMOD=":CONFIG_GRKERNSEC_CHROOT_CHMOD	some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CAPS=":CONFIG_GRKERNSEC_CHROOT_CAPS	some GRSEC features make LXC unusable see postinst notes"
+ERROR_GRKERNSEC_PROC=":CONFIG_GRKERNSEC_PROC:  this GRSEC feature is incompatible with unprivileged containers"
 
 DOCS=(AUTHORS CONTRIBUTING MAINTAINERS NEWS README doc/FAQ.txt)
 

diff --git a/app-emulation/lxc/lxc-1.0.7.ebuild b/app-emulation/lxc/lxc-1.0.7.ebuild
index bb1af21..e762896 100644
--- a/app-emulation/lxc/lxc-1.0.7.ebuild
+++ b/app-emulation/lxc/lxc-1.0.7.ebuild
@@ -56,6 +56,7 @@ CONFIG_CHECK="~CGROUPS ~CGROUP_DEVICE
 	~!GRKERNSEC_CHROOT_PIVOT
 	~!GRKERNSEC_CHROOT_CHMOD
 	~!GRKERNSEC_CHROOT_CAPS
+	~!GRKERNSEC_PROC
 "
 
 ERROR_DEVPTS_MULTIPLE_INSTANCES="CONFIG_DEVPTS_MULTIPLE_INSTANCES:	needed for pts inside container"
@@ -77,6 +78,7 @@ ERROR_GRKERNSEC_CHROOT_DOUBLE=":CONFIG_GRKERNSEC_CHROOT_DOUBLE	some GRSEC featur
 ERROR_GRKERNSEC_CHROOT_PIVOT=":CONFIG_GRKERNSEC_CHROOT_PIVOT	some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CHMOD=":CONFIG_GRKERNSEC_CHROOT_CHMOD	some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CAPS=":CONFIG_GRKERNSEC_CHROOT_CAPS	some GRSEC features make LXC unusable see postinst notes"
+ERROR_GRKERNSEC_PROC=":CONFIG_GRKERNSEC_PROC:  this GRSEC feature is incompatible with unprivileged containers"
 
 DOCS=(AUTHORS CONTRIBUTING MAINTAINERS NEWS README doc/FAQ.txt)
 

diff --git a/app-emulation/lxc/lxc-1.1.0-r6.ebuild b/app-emulation/lxc/lxc-1.1.0-r6.ebuild
index 5551bc9..57b24da 100644
--- a/app-emulation/lxc/lxc-1.1.0-r6.ebuild
+++ b/app-emulation/lxc/lxc-1.1.0-r6.ebuild
@@ -61,6 +61,7 @@ CONFIG_CHECK="~CGROUPS ~CGROUP_DEVICE
 	~!GRKERNSEC_CHROOT_PIVOT
 	~!GRKERNSEC_CHROOT_CHMOD
 	~!GRKERNSEC_CHROOT_CAPS
+	~!GRKERNSEC_PROC
 "
 
 ERROR_DEVPTS_MULTIPLE_INSTANCES="CONFIG_DEVPTS_MULTIPLE_INSTANCES:  needed for pts inside container"
@@ -89,6 +90,7 @@ ERROR_GRKERNSEC_CHROOT_DOUBLE="CONFIG_GRKERNSEC_CHROOT_DOUBLE:  some GRSEC featu
 ERROR_GRKERNSEC_CHROOT_PIVOT="CONFIG_GRKERNSEC_CHROOT_PIVOT:  some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CHMOD="CONFIG_GRKERNSEC_CHROOT_CHMOD:  some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CAPS="CONFIG_GRKERNSEC_CHROOT_CAPS:  some GRSEC features make LXC unusable see postinst notes"
+ERROR_GRKERNSEC_PROC="CONFIG_GRKERNSEC_PROC:  this GRSEC feature is incompatible with unprivileged containers"
 
 DOCS=(AUTHORS CONTRIBUTING MAINTAINERS NEWS README doc/FAQ.txt)
 

diff --git a/app-emulation/lxc/lxc-1.1.1-r1.ebuild b/app-emulation/lxc/lxc-1.1.1-r1.ebuild
index fbdb089..bd4c9cd 100644
--- a/app-emulation/lxc/lxc-1.1.1-r1.ebuild
+++ b/app-emulation/lxc/lxc-1.1.1-r1.ebuild
@@ -61,6 +61,7 @@ CONFIG_CHECK="~CGROUPS ~CGROUP_DEVICE
 	~!GRKERNSEC_CHROOT_PIVOT
 	~!GRKERNSEC_CHROOT_CHMOD
 	~!GRKERNSEC_CHROOT_CAPS
+	~!GRKERNSEC_PROC
 "
 
 ERROR_DEVPTS_MULTIPLE_INSTANCES="CONFIG_DEVPTS_MULTIPLE_INSTANCES:  needed for pts inside container"
@@ -89,6 +90,7 @@ ERROR_GRKERNSEC_CHROOT_DOUBLE="CONFIG_GRKERNSEC_CHROOT_DOUBLE:  some GRSEC featu
 ERROR_GRKERNSEC_CHROOT_PIVOT="CONFIG_GRKERNSEC_CHROOT_PIVOT:  some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CHMOD="CONFIG_GRKERNSEC_CHROOT_CHMOD:  some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CAPS="CONFIG_GRKERNSEC_CHROOT_CAPS:  some GRSEC features make LXC unusable see postinst notes"
+ERROR_GRKERNSEC_PROC="CONFIG_GRKERNSEC_PROC:  this GRSEC feature is incompatible with unprivileged containers"
 
 DOCS=(AUTHORS CONTRIBUTING MAINTAINERS NEWS README doc/FAQ.txt)
 

diff --git a/app-emulation/lxc/lxc-1.1.2-r1.ebuild b/app-emulation/lxc/lxc-1.1.2-r1.ebuild
index 8dd8dd2..50b4d5b 100644
--- a/app-emulation/lxc/lxc-1.1.2-r1.ebuild
+++ b/app-emulation/lxc/lxc-1.1.2-r1.ebuild
@@ -61,6 +61,7 @@ CONFIG_CHECK="~CGROUPS ~CGROUP_DEVICE
 	~!GRKERNSEC_CHROOT_PIVOT
 	~!GRKERNSEC_CHROOT_CHMOD
 	~!GRKERNSEC_CHROOT_CAPS
+	~!GRKERNSEC_PROC
 "
 
 ERROR_DEVPTS_MULTIPLE_INSTANCES="CONFIG_DEVPTS_MULTIPLE_INSTANCES:  needed for pts inside container"
@@ -89,6 +90,7 @@ ERROR_GRKERNSEC_CHROOT_DOUBLE="CONFIG_GRKERNSEC_CHROOT_DOUBLE:  some GRSEC featu
 ERROR_GRKERNSEC_CHROOT_PIVOT="CONFIG_GRKERNSEC_CHROOT_PIVOT:  some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CHMOD="CONFIG_GRKERNSEC_CHROOT_CHMOD:  some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CAPS="CONFIG_GRKERNSEC_CHROOT_CAPS:  some GRSEC features make LXC unusable see postinst notes"
+ERROR_GRKERNSEC_PROC="CONFIG_GRKERNSEC_PROC:  this GRSEC feature is incompatible with unprivileged containers"
 
 DOCS=(AUTHORS CONTRIBUTING MAINTAINERS NEWS README doc/FAQ.txt)
 

diff --git a/app-emulation/lxc/lxc-1.1.2-r2.ebuild b/app-emulation/lxc/lxc-1.1.2-r2.ebuild
index 8dd8dd2..50b4d5b 100644
--- a/app-emulation/lxc/lxc-1.1.2-r2.ebuild
+++ b/app-emulation/lxc/lxc-1.1.2-r2.ebuild
@@ -61,6 +61,7 @@ CONFIG_CHECK="~CGROUPS ~CGROUP_DEVICE
 	~!GRKERNSEC_CHROOT_PIVOT
 	~!GRKERNSEC_CHROOT_CHMOD
 	~!GRKERNSEC_CHROOT_CAPS
+	~!GRKERNSEC_PROC
 "
 
 ERROR_DEVPTS_MULTIPLE_INSTANCES="CONFIG_DEVPTS_MULTIPLE_INSTANCES:  needed for pts inside container"
@@ -89,6 +90,7 @@ ERROR_GRKERNSEC_CHROOT_DOUBLE="CONFIG_GRKERNSEC_CHROOT_DOUBLE:  some GRSEC featu
 ERROR_GRKERNSEC_CHROOT_PIVOT="CONFIG_GRKERNSEC_CHROOT_PIVOT:  some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CHMOD="CONFIG_GRKERNSEC_CHROOT_CHMOD:  some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CAPS="CONFIG_GRKERNSEC_CHROOT_CAPS:  some GRSEC features make LXC unusable see postinst notes"
+ERROR_GRKERNSEC_PROC="CONFIG_GRKERNSEC_PROC:  this GRSEC feature is incompatible with unprivileged containers"
 
 DOCS=(AUTHORS CONTRIBUTING MAINTAINERS NEWS README doc/FAQ.txt)
 

diff --git a/app-emulation/lxc/lxc-1.1.2.ebuild b/app-emulation/lxc/lxc-1.1.2.ebuild
index 660348e..8d89bca 100644
--- a/app-emulation/lxc/lxc-1.1.2.ebuild
+++ b/app-emulation/lxc/lxc-1.1.2.ebuild
@@ -61,6 +61,7 @@ CONFIG_CHECK="~CGROUPS ~CGROUP_DEVICE
 	~!GRKERNSEC_CHROOT_PIVOT
 	~!GRKERNSEC_CHROOT_CHMOD
 	~!GRKERNSEC_CHROOT_CAPS
+	~!GRKERNSEC_PROC
 "
 
 ERROR_DEVPTS_MULTIPLE_INSTANCES="CONFIG_DEVPTS_MULTIPLE_INSTANCES:  needed for pts inside container"
@@ -89,6 +90,7 @@ ERROR_GRKERNSEC_CHROOT_DOUBLE="CONFIG_GRKERNSEC_CHROOT_DOUBLE:  some GRSEC featu
 ERROR_GRKERNSEC_CHROOT_PIVOT="CONFIG_GRKERNSEC_CHROOT_PIVOT:  some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CHMOD="CONFIG_GRKERNSEC_CHROOT_CHMOD:  some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CAPS="CONFIG_GRKERNSEC_CHROOT_CAPS:  some GRSEC features make LXC unusable see postinst notes"
+ERROR_GRKERNSEC_PROC="CONFIG_GRKERNSEC_PROC:  this GRSEC feature is incompatible with unprivileged containers"
 
 DOCS=(AUTHORS CONTRIBUTING MAINTAINERS NEWS README doc/FAQ.txt)

next             reply	other threads:[~2015-10-05 17:12 UTC|newest]

Thread overview: 105+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-10-05 17:11 Markos Chandras [this message]
  -- strict thread matches above, loose matches on Subject: below --
2021-12-16 20:22 [gentoo-commits] repo/gentoo:master commit in: app-emulation/lxc/ Joonas Niilola
2021-12-02  3:39 Sam James
2021-12-01  7:05 Joonas Niilola
2021-12-01  7:05 Joonas Niilola
2021-10-29  7:14 Joonas Niilola
2021-10-22 15:19 Joonas Niilola
2021-10-22  8:39 Joonas Niilola
2021-10-22  8:39 Joonas Niilola
2021-08-26  6:42 Joonas Niilola
2021-08-26  6:42 Joonas Niilola
2021-07-26  8:07 Yixun Lan
2021-07-19 11:15 Joonas Niilola
2021-07-19 11:15 Joonas Niilola
2021-06-01  8:43 Joonas Niilola
2021-06-01  8:43 Joonas Niilola
2021-05-05  5:11 Joonas Niilola
2021-05-05  5:11 Joonas Niilola
2021-05-01  5:38 Joonas Niilola
2021-05-01  5:38 Joonas Niilola
2021-04-30 19:04 Mikle Kolyada
2021-04-30  7:01 Joonas Niilola
2021-01-30  6:38 Joonas Niilola
2021-01-30  6:38 Joonas Niilola
2021-01-30  6:38 Joonas Niilola
2021-01-14  3:39 Joonas Niilola
2021-01-09 12:43 Joonas Niilola
2020-11-25 12:27 Joonas Niilola
2020-11-21  6:58 Joonas Niilola
2020-11-21  6:58 Joonas Niilola
2020-10-22  7:44 Joonas Niilola
2020-10-22  7:15 Joonas Niilola
2020-09-22  6:54 Joonas Niilola
2020-09-14  5:11 Joonas Niilola
2020-09-04  5:47 Joonas Niilola
2020-09-04  5:47 Joonas Niilola
2020-08-05  6:44 Joonas Niilola
2020-08-05  6:44 Joonas Niilola
2020-08-04 16:50 Joonas Niilola
2020-08-04 16:50 Joonas Niilola
2020-08-04 16:50 Joonas Niilola
2020-06-29  6:09 Joonas Niilola
2020-06-21 17:02 Joonas Niilola
2020-06-21 17:02 Joonas Niilola
2020-05-29 13:15 Joonas Niilola
2020-05-29 13:15 Joonas Niilola
2020-05-26 10:16 Joonas Niilola
2020-05-20 13:10 Joonas Niilola
2020-05-19 15:27 Stefan Strogin
2020-05-19 13:27 Joonas Niilola
2020-05-19  7:56 Joonas Niilola
2020-05-18 13:39 Joonas Niilola
2020-05-15  5:20 Joonas Niilola
2019-10-12 18:35 Mikle Kolyada
2019-07-05 19:05 Virgil Dupras
2019-02-17 17:59 Sergei Trofimovich
2018-12-31 18:55 Virgil Dupras
2018-12-31 18:55 Virgil Dupras
2018-12-23 15:52 Virgil Dupras
2018-11-26  1:50 Virgil Dupras
2018-10-06 23:05 Thomas Deutschmann
2018-10-05 12:49 Virgil Dupras
2018-08-23 17:54 Virgil Dupras
2018-08-22 12:35 Virgil Dupras
2018-08-13  0:55 Virgil Dupras
2018-08-07  8:50 Agostino Sarubbo
2018-08-06 22:20 Thomas Deutschmann
2018-07-30 21:17 Mikle Kolyada
2018-07-29 10:35 Sergei Trofimovich
2018-07-28 13:24 Thomas Deutschmann
2018-06-26  2:18 Virgil Dupras
2018-06-26  2:12 Virgil Dupras
2018-06-16  2:21 Virgil Dupras
2018-06-14  0:30 Virgil Dupras
2018-05-14  9:46 Mike Frysinger
2018-04-26  1:36 Matthias Maier
2018-04-15 19:39 Sergei Trofimovich
2018-04-15 18:58 Thomas Deutschmann
2018-04-14 17:58 Aaron Bauman
2018-04-04 21:05 Matthias Maier
2018-02-28 22:23 Sergei Trofimovich
2018-01-30 17:01 Matthias Maier
2017-12-20 13:09 Agostino Sarubbo
2017-12-19 15:46 Thomas Deutschmann
2017-12-16  0:24 Matthias Maier
2017-12-16  0:24 Matthias Maier
2017-12-16  0:24 Matthias Maier
2017-12-16  0:24 Matthias Maier
2017-12-15 22:58 Matthias Maier
2017-12-15 22:58 Matthias Maier
2017-12-15 22:58 Matthias Maier
2017-07-26 14:56 Matt Thode
2017-06-19 17:03 Agostino Sarubbo
2017-05-29 13:46 Sergei Trofimovich
2017-02-22 10:49 Aaron Bauman
2017-02-03  8:51 Yixun Lan
2017-02-03  8:51 Yixun Lan
2016-12-08  9:39 Yixun Lan
2016-11-25 18:54 Agostino Sarubbo
2016-11-25 18:27 Agostino Sarubbo
2016-08-24 10:38 Pacho Ramos
2015-10-31 11:11 Michał Górny
2015-10-18 11:34 Markos Chandras
2015-10-05 17:11 Markos Chandras
2015-09-23 12:51 Agostino Sarubbo

find likely ancestor, descendant, or conflicting patches for this message:
( dfblob:a9b43e5 dfblob:5fcb857 dfblob:bb1af21 dfblob:e762896
dfblob:5551bc9 dfblob:57b24da dfblob:fbdb089 dfblob:bd4c9cd
dfblob:8dd8dd2 dfblob:50b4d5b dfblob:8dd8dd2 dfblob:50b4d5b
dfblob:660348e dfblob:8d89bca )
 OR (
bs:"[gentoo-commits] repo/gentoo:master commit in: app-emulation/lxc/" )
	(help)

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1441409080.78ef1b565ae26608f11a81f2b60e4a8e404ef9c3.hwoarang@gentoo \
    --to=hwoarang@gentoo.org \
    --cc=gentoo-commits@lists.gentoo.org \
    --cc=gentoo-dev@lists.gentoo.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

Be sure your reply has a Subject: header at the top and a blank line before the message body.

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox