aljaz/kata-containers
1
0
Fork 0
mirror of https://github.com/aljazceru/kata-containers.git synced 2026-02-23 15:34:28 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1139 from lifupan/skip_networkcheck

Browse Source 
rustjail: remove the network ns validation against container
This commit is contained in:
Bin Liu
2020-11-25 15:03:18 +08:00
committed by GitHub
parent a853e8eaca 3b08376c4e
commit 8d19b8e013
1 changed files with 0 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
src/agent/rustjail/src/validator.rs
View File

@@ -188,19 +188,6 @@ fn sysctl(oci: &Spec) -> Result<()> {
}
}
if key.starts_with("net.") {
if !contain_namespace(&linux.namespaces, "network") {
return Err(anyhow!(nix::Error::from_errno(Errno::EINVAL)));
}
let net = get_namespace_path(&linux.namespaces, "network")?;
if net.is_empty() || net == "" {
continue;
}
check_host_ns(net.as_str())?;
}
if contain_namespace(&linux.namespaces, "uts") {
if key == "kernel.domainname" {
continue;