mesos-reviews mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From James Peach <jpe...@apache.org>
Subject Review Request 64385: Used more restrictive mount flags for host network bind mounts.
Date Wed, 06 Dec 2017 16:33:16 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/64385/
-----------------------------------------------------------

Review request for mesos, Jie Yu and Jiang Yan Xu.


Bugs: MESOS-8286
    https://issues.apache.org/jira/browse/MESOS-8286


Repository: mesos


Description
-------

In the CNI isolator, mount the network configuration files with
the most restrictive mount flags to avoid getting trapped by user
namespace unprivileged mount preconditions.


Diffs
-----

  src/slave/containerizer/mesos/isolators/network/cni/cni.cpp 0eca067c133004ae95e61ca9280cbaebed0f8357



Diff: https://reviews.apache.org/r/64385/diff/1/


Testing
-------

sudo make check (Fedora 27)


Thanks,

James Peach


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message