These host devices are created for container,
the owner should be the root user of container.
Signed-off-by: Gao feng <gaof...@cn.fujitsu.com>
---
src/lxc/lxc_controller.c | 9 +++++++++
1 file changed, 9 insertions(+)
diff --git a/src/lxc/lxc_controller.c b/src/lxc/lxc_controller.c
index dbb053a..ce1f941 100644
--- a/src/lxc/lxc_controller.c
+++ b/src/lxc/lxc_controller.c
@@ -1348,6 +1348,9 @@ virLXCControllerSetupHostdevSubsysUSB(virDomainDefPtr
vmDef,
goto cleanup;
}
+ if (lxcContainerChown(vmDef, dstfile) < 0)
+ goto cleanup;
+
if (virSecurityManagerSetHostdevLabel(securityDriver,
vmDef, def, vroot) < 0)
goto cleanup;
@@ -1425,6 +1428,9 @@ virLXCControllerSetupHostdevCapsStorage(virDomainDefPtr
vmDef,
goto cleanup;
}
+ if (lxcContainerChown(vmDef, dst) < 0)
+ goto cleanup;
+
def->source.caps.u.storage.block = dst;
if (virSecurityManagerSetHostdevLabel(securityDriver, vmDef, def, NULL) <
0)
goto cleanup;
@@ -1501,6 +1507,9 @@ virLXCControllerSetupHostdevCapsMisc(virDomainDefPtr
vmDef,
goto cleanup;
}
+ if (lxcContainerChown(vmDef, dst) < 0)
+ goto cleanup;
+
def->source.caps.u.misc.chardev = dst;
if (virSecurityManagerSetHostdevLabel(securityDriver, vmDef, def, NULL) <
0)
goto cleanup;
--
1.8.3.1
--
libvir-list mailing list
libvir-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list
