Andrey Vagin 444cc2989a namespaces: allow to use pid namespace without mount namespace ...

The gocapability package uses /proc/PID/status to get a bounding set.
If a container uses pidns without mntns, it sees /proc from the host
namespace, but the process doesn't know its own pid in this namespace.

In this case it can use /proc/self/status, which is always the right one.

Signed-off-by: Andrew Vagin <avagin@openvz.org>

2015-02-04 01:01:43 +03:00

..

capabilities

namespaces: allow to use pid namespace without mount namespace

2015-02-04 01:01:43 +03:00

restrict

Migrate selinux system xattr calls and prctl calls

2014-07-14 16:55:49 -07:00