]> git.proxmox.com Git - mirror_lxc.git/commit
lxc-busybox: Prevent copying binaries from /usr/local to container
authorBogdan Purcareata <bogdan.purcareata@freescale.com>
Tue, 12 May 2015 09:45:28 +0000 (09:45 +0000)
committerStéphane Graber <stgraber@ubuntu.com>
Tue, 26 May 2015 17:04:43 +0000 (13:04 -0400)
commit88e3899351cf9bef7b1285ed96c525cbadc0a420
treef6099ffc346600b8d090d21e1b6a1f341110b47f
parent4432b512a280be289d0797bdbcc0a40fcb2635ce
lxc-busybox: Prevent copying binaries from /usr/local to container

On certain systems, some binaries needed by the container features (dropbear,
openssh), may be placed in non-standard (aka non-distribution-managed
locations), such as /usr/local/*, /opt/local/*, etc. Don't copy the respective
binaries in the container and return a clear error why.

The user should only use these binaries if they are installed at system-wide
locations on the host, such as /{s,}bin or /usr/{s,}bin.

v2:
- check that binary paths adhere to /{,usr/}{,s}bin only

Signed-off-by: Bogdan Purcareata <bogdan.purcareata@freescale.com>
Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>
templates/lxc-busybox.in