From f7069032290a9720142b2ee2c6315d7e1f1a1bd3 Mon Sep 17 00:00:00 2001 From: Etienne CHAMPETIER Date: Thu, 29 Dec 2016 18:08:58 -0800 Subject: [PATCH 1/1] ujail: add basic /dev files This adds /dev/full /dev/null /dev/urandom /dev/zero in every jail (not having them only allow subtle bugs) Signed-off-by: Etienne CHAMPETIER --- jail/jail.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/jail/jail.c b/jail/jail.c index 834d677..8e7cddc 100644 --- a/jail/jail.c +++ b/jail/jail.c @@ -398,6 +398,11 @@ int main(int argc, char **argv) uloop_init(); if (opts.namespace) { + add_mount("/dev/full", 0, -1); + add_mount("/dev/null", 0, -1); + add_mount("/dev/urandom", 0, -1); + add_mount("/dev/zero", 0, -1); + int flags = CLONE_NEWPID | CLONE_NEWNS | CLONE_NEWIPC | SIGCHLD; if (opts.hostname) flags |= CLONE_NEWUTS; -- 2.30.2