From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Serge E. Hallyn" Subject: Re: [patch 1/1][RFC] do not sys_reboot when not in init_pid_ns Date: Tue, 4 Nov 2008 15:01:34 -0600 Message-ID: <20081104210134.GA6238@us.ibm.com> References: <490CEDA0.6020800@fr.ibm.com> <54333.2001:16d8:ff15:101:219:d2ff:fed5:8193.1225584965.squirrel@intranet> <4910B34B.7070901@fr.ibm.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Content-Disposition: inline In-Reply-To: <4910B34B.7070901-NmTC/0ZBporQT0dZR+AlfA@public.gmane.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Errors-To: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org To: Daniel Lezcano Cc: Linux Containers List-Id: containers.vger.kernel.org Quoting Daniel Lezcano (dlezcano-NmTC/0ZBporQT0dZR+AlfA@public.gmane.org): > Daniel Hokka Zakrisson wrote: > > Daniel Lezcano wrote: > > > > Wouldn't it be better to simply remove CAP_SYS_BOOT from containers > > until sys_reboot emits some signal to userspace to restart/halt the > > container? (This is what we do in Linux-VServer.) > > Ok, I will try, thanks. > > BTW, isn't possible that a process gave CAP_SYS_BOOT capability again to > himself and being able to shutdown the host ? I guess I should remove > CAP_SETPCAP too, no ? No, remove it from your bounding set. You can never add bits back to that set. prctl(PR_CAPBSET_DROP, CAP_SYS_BOOT); -serge