jail: re-implement /proc/sys/net read-write in netns hack
authorDaniel Golle <daniel@makrotopia.org>
Mon, 20 Jul 2020 00:37:15 +0000 (01:37 +0100)
committerDaniel Golle <daniel@makrotopia.org>
Mon, 20 Jul 2020 03:20:21 +0000 (04:20 +0100)
commit66ae2d947ea463c53de1bf2ed5491c9926694f02
tree9ff31261ae266f5d8c83db0a259989db44432256
parentf91009a25460cd09362fbd30229be45ea8b30026
jail: re-implement /proc/sys/net read-write in netns hack

Hack to make /proc/sys/net read-write while the rest of /proc/sys is
read-only which cannot be expressed with OCI spec, but happends to be
very useful. Only apply it if '/proc/sys' is not already listed as
mount, maskedPath or readonlyPath.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
jail/fs.c
jail/fs.h
jail/jail.c