Dan Walsh 1a4e7d1b20 Make mqueue container specific ...

mqueue can not be mounted on the host os and then shared into the container.
There is only one mqueue per mount namespace, so current code ends up leaking
the /dev/mqueue from the host into ALL containers.  Since SELinux changes the
label of the mqueue, only the last container is able to use the mqueue, all
other containers will get a permission denied.  If you don't have SELinux protections
sharing of the /dev/mqueue allows one container to interact in potentially hostile
ways with other containers.

Signed-off-by: Dan Walsh <dwalsh@redhat.com>
Upstream-commit: ba38d58659cc155aebf89a2ea4cfc3cd7ba04a64
Component: engine

2016-02-05 16:50:35 +01:00

..

template

Make mqueue container specific

2016-02-05 16:50:35 +01:00

create.go

Fix typos in create.go

2016-01-28 14:08:11 -07:00

driver_unsupported_nocgo.go

Fix declarations of of execdriver/native.NewDriver to have the same signature.

2016-01-02 19:55:37 +01:00

driver_unsupported.go

Fix declarations of of execdriver/native.NewDriver to have the same signature.

2016-01-02 19:55:37 +01:00

driver.go

remove the unused Info interface in daemon/execdriver/driver.go and related code

2016-02-02 09:04:52 +08:00

exec.go

Add user namespace (mapping) support to the Docker engine

2015-10-09 17:47:37 -04:00

init.go

Update libcontainer

2015-07-16 16:02:26 -07:00