public inbox for gentoo-commits@lists.gentoo.org
 help / color / mirror / Atom feed
From: "Michał Górny" <mgorny@gentoo.org>
To: gentoo-commits@lists.gentoo.org
Subject: [gentoo-commits] repo/gentoo:master commit in: app-emulation/lxc/
Date: Sat, 31 Oct 2015 11:11:42 +0000 (UTC)	[thread overview]
Message-ID: <1446253585.c2c88ec4ea7cba331b6486cab9041cb909b49b6a.mgorny@gentoo> (raw)

commit:     c2c88ec4ea7cba331b6486cab9041cb909b49b6a
Author:     Jakub Jirutka <jakub <AT> jirutka <DOT> cz>
AuthorDate: Thu Oct 15 12:21:15 2015 +0000
Commit:     Michał Górny <mgorny <AT> gentoo <DOT> org>
CommitDate: Sat Oct 31 01:06:25 2015 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c2c88ec4

app-emulation/lxc: Forward-port !GRKERNSEC* checks to 1.1.3+

See 78ef1b565ae26608f11a81f2b60e4a8e404ef9c3
and a226893bb48e8979b054b1b8cb463402a8d58e27.

 app-emulation/lxc/lxc-1.1.3.ebuild | 4 ++++
 app-emulation/lxc/lxc-1.1.4.ebuild | 4 ++++
 2 files changed, 8 insertions(+)

diff --git a/app-emulation/lxc/lxc-1.1.3.ebuild b/app-emulation/lxc/lxc-1.1.3.ebuild
index 4a336ef..b41c685 100644
--- a/app-emulation/lxc/lxc-1.1.3.ebuild
+++ b/app-emulation/lxc/lxc-1.1.3.ebuild
@@ -61,6 +61,8 @@ CONFIG_CHECK="~CGROUPS ~CGROUP_DEVICE
 	~!GRKERNSEC_CHROOT_PIVOT
 	~!GRKERNSEC_CHROOT_CHMOD
 	~!GRKERNSEC_CHROOT_CAPS
+	~!GRKERNSEC_PROC
+	~!GRKERNSEC_SYSFS_RESTRICT
 "
 
 ERROR_DEVPTS_MULTIPLE_INSTANCES="CONFIG_DEVPTS_MULTIPLE_INSTANCES:  needed for pts inside container"
@@ -89,6 +91,8 @@ ERROR_GRKERNSEC_CHROOT_DOUBLE="CONFIG_GRKERNSEC_CHROOT_DOUBLE:  some GRSEC featu
 ERROR_GRKERNSEC_CHROOT_PIVOT="CONFIG_GRKERNSEC_CHROOT_PIVOT:  some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CHMOD="CONFIG_GRKERNSEC_CHROOT_CHMOD:  some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CAPS="CONFIG_GRKERNSEC_CHROOT_CAPS:  some GRSEC features make LXC unusable see postinst notes"
+ERROR_GRKERNSEC_PROC="CONFIG_GRKERNSEC_PROC:  this GRSEC feature is incompatible with unprivileged containers"
+ERROR_GRKERNSEC_SYSFS_RESTRICT="CONFIG_GRKERNSEC_SYSFS_RESTRICT:  this GRSEC feature is incompatible with unprivileged containers"
 
 DOCS=(AUTHORS CONTRIBUTING MAINTAINERS NEWS README doc/FAQ.txt)
 

diff --git a/app-emulation/lxc/lxc-1.1.4.ebuild b/app-emulation/lxc/lxc-1.1.4.ebuild
index 7344904..12c1751 100644
--- a/app-emulation/lxc/lxc-1.1.4.ebuild
+++ b/app-emulation/lxc/lxc-1.1.4.ebuild
@@ -61,6 +61,8 @@ CONFIG_CHECK="~CGROUPS ~CGROUP_DEVICE
 	~!GRKERNSEC_CHROOT_PIVOT
 	~!GRKERNSEC_CHROOT_CHMOD
 	~!GRKERNSEC_CHROOT_CAPS
+	~!GRKERNSEC_PROC
+	~!GRKERNSEC_SYSFS_RESTRICT
 "
 
 ERROR_DEVPTS_MULTIPLE_INSTANCES="CONFIG_DEVPTS_MULTIPLE_INSTANCES:  needed for pts inside container"
@@ -89,6 +91,8 @@ ERROR_GRKERNSEC_CHROOT_DOUBLE="CONFIG_GRKERNSEC_CHROOT_DOUBLE:  some GRSEC featu
 ERROR_GRKERNSEC_CHROOT_PIVOT="CONFIG_GRKERNSEC_CHROOT_PIVOT:  some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CHMOD="CONFIG_GRKERNSEC_CHROOT_CHMOD:  some GRSEC features make LXC unusable see postinst notes"
 ERROR_GRKERNSEC_CHROOT_CAPS="CONFIG_GRKERNSEC_CHROOT_CAPS:  some GRSEC features make LXC unusable see postinst notes"
+ERROR_GRKERNSEC_PROC="CONFIG_GRKERNSEC_PROC:  this GRSEC feature is incompatible with unprivileged containers"
+ERROR_GRKERNSEC_SYSFS_RESTRICT="CONFIG_GRKERNSEC_SYSFS_RESTRICT:  this GRSEC feature is incompatible with unprivileged containers"
 
 DOCS=(AUTHORS CONTRIBUTING MAINTAINERS NEWS README doc/FAQ.txt)
 


             reply	other threads:[~2015-10-31 11:11 UTC|newest]

Thread overview: 105+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2015-10-31 11:11 Michał Górny [this message]
  -- strict thread matches above, loose matches on Subject: below --
2021-12-16 20:22 [gentoo-commits] repo/gentoo:master commit in: app-emulation/lxc/ Joonas Niilola
2021-12-02  3:39 Sam James
2021-12-01  7:05 Joonas Niilola
2021-12-01  7:05 Joonas Niilola
2021-10-29  7:14 Joonas Niilola
2021-10-22 15:19 Joonas Niilola
2021-10-22  8:39 Joonas Niilola
2021-10-22  8:39 Joonas Niilola
2021-08-26  6:42 Joonas Niilola
2021-08-26  6:42 Joonas Niilola
2021-07-26  8:07 Yixun Lan
2021-07-19 11:15 Joonas Niilola
2021-07-19 11:15 Joonas Niilola
2021-06-01  8:43 Joonas Niilola
2021-06-01  8:43 Joonas Niilola
2021-05-05  5:11 Joonas Niilola
2021-05-05  5:11 Joonas Niilola
2021-05-01  5:38 Joonas Niilola
2021-05-01  5:38 Joonas Niilola
2021-04-30 19:04 Mikle Kolyada
2021-04-30  7:01 Joonas Niilola
2021-01-30  6:38 Joonas Niilola
2021-01-30  6:38 Joonas Niilola
2021-01-30  6:38 Joonas Niilola
2021-01-14  3:39 Joonas Niilola
2021-01-09 12:43 Joonas Niilola
2020-11-25 12:27 Joonas Niilola
2020-11-21  6:58 Joonas Niilola
2020-11-21  6:58 Joonas Niilola
2020-10-22  7:44 Joonas Niilola
2020-10-22  7:15 Joonas Niilola
2020-09-22  6:54 Joonas Niilola
2020-09-14  5:11 Joonas Niilola
2020-09-04  5:47 Joonas Niilola
2020-09-04  5:47 Joonas Niilola
2020-08-05  6:44 Joonas Niilola
2020-08-05  6:44 Joonas Niilola
2020-08-04 16:50 Joonas Niilola
2020-08-04 16:50 Joonas Niilola
2020-08-04 16:50 Joonas Niilola
2020-06-29  6:09 Joonas Niilola
2020-06-21 17:02 Joonas Niilola
2020-06-21 17:02 Joonas Niilola
2020-05-29 13:15 Joonas Niilola
2020-05-29 13:15 Joonas Niilola
2020-05-26 10:16 Joonas Niilola
2020-05-20 13:10 Joonas Niilola
2020-05-19 15:27 Stefan Strogin
2020-05-19 13:27 Joonas Niilola
2020-05-19  7:56 Joonas Niilola
2020-05-18 13:39 Joonas Niilola
2020-05-15  5:20 Joonas Niilola
2019-10-12 18:35 Mikle Kolyada
2019-07-05 19:05 Virgil Dupras
2019-02-17 17:59 Sergei Trofimovich
2018-12-31 18:55 Virgil Dupras
2018-12-31 18:55 Virgil Dupras
2018-12-23 15:52 Virgil Dupras
2018-11-26  1:50 Virgil Dupras
2018-10-06 23:05 Thomas Deutschmann
2018-10-05 12:49 Virgil Dupras
2018-08-23 17:54 Virgil Dupras
2018-08-22 12:35 Virgil Dupras
2018-08-13  0:55 Virgil Dupras
2018-08-07  8:50 Agostino Sarubbo
2018-08-06 22:20 Thomas Deutschmann
2018-07-30 21:17 Mikle Kolyada
2018-07-29 10:35 Sergei Trofimovich
2018-07-28 13:24 Thomas Deutschmann
2018-06-26  2:18 Virgil Dupras
2018-06-26  2:12 Virgil Dupras
2018-06-16  2:21 Virgil Dupras
2018-06-14  0:30 Virgil Dupras
2018-05-14  9:46 Mike Frysinger
2018-04-26  1:36 Matthias Maier
2018-04-15 19:39 Sergei Trofimovich
2018-04-15 18:58 Thomas Deutschmann
2018-04-14 17:58 Aaron Bauman
2018-04-04 21:05 Matthias Maier
2018-02-28 22:23 Sergei Trofimovich
2018-01-30 17:01 Matthias Maier
2017-12-20 13:09 Agostino Sarubbo
2017-12-19 15:46 Thomas Deutschmann
2017-12-16  0:24 Matthias Maier
2017-12-16  0:24 Matthias Maier
2017-12-16  0:24 Matthias Maier
2017-12-16  0:24 Matthias Maier
2017-12-15 22:58 Matthias Maier
2017-12-15 22:58 Matthias Maier
2017-12-15 22:58 Matthias Maier
2017-07-26 14:56 Matt Thode
2017-06-19 17:03 Agostino Sarubbo
2017-05-29 13:46 Sergei Trofimovich
2017-02-22 10:49 Aaron Bauman
2017-02-03  8:51 Yixun Lan
2017-02-03  8:51 Yixun Lan
2016-12-08  9:39 Yixun Lan
2016-11-25 18:54 Agostino Sarubbo
2016-11-25 18:27 Agostino Sarubbo
2016-08-24 10:38 Pacho Ramos
2015-10-18 11:34 Markos Chandras
2015-10-05 17:11 Markos Chandras
2015-10-05 17:11 Markos Chandras
2015-09-23 12:51 Agostino Sarubbo

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1446253585.c2c88ec4ea7cba331b6486cab9041cb909b49b6a.mgorny@gentoo \
    --to=mgorny@gentoo.org \
    --cc=gentoo-commits@lists.gentoo.org \
    --cc=gentoo-dev@lists.gentoo.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox