lab/mininet
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Fall back to chroot() if setns() fails for mnt namespace

Browse Source 
fixes #347
This commit is contained in:
Bob Lantz
2014-08-26 14:09:40 -07:00
parent 16a384ab4b
commit bfdbb7089a
1 changed files with 11 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mnexec.c
+8 -7
View File
@@ -140,9 +140,9 @@ int main(int argc, char *argv[])
fflush(stdout); fflush(stdout);
break; break;
case 'a': case 'a':
/* Attach to pid's network namespace and mount namespace*/ /* Attach to pid's network namespace and mount namespace */
pid = atoi(optarg); pid = atoi(optarg);
sprintf(path, "/proc/%d/ns/net", pid ); sprintf(path, "/proc/%d/ns/net", pid);
nsid = open(path, O_RDONLY); nsid = open(path, O_RDONLY);
if (nsid < 0) { if (nsid < 0) {
perror(path); perror(path);
@@ -152,15 +152,16 @@ int main(int argc, char *argv[])
perror("setns"); perror("setns");
return 1; return 1;
} }
sprintf(path, "/proc/%d/ns/mnt", pid ); /* Plan A: call setns() to attach to mount namespace */
sprintf(path, "/proc/%d/ns/mnt", pid);
nsid = open(path, O_RDONLY); nsid = open(path, O_RDONLY);
if (nsid < 0) { if (nsid < 0 || setns(nsid, 0) != 0) {
/* Plan B: chroot into pid's root file system */
sprintf(path, "/proc/%d/root", pid);
if (chroot(path) < 0) {
perror(path); perror(path);
return 1; return 1;
} }
if (setns(nsid, 0) != 0) {
perror("setns");
return 1;
} }
break; break;
case 'g': case 'g':