X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=lxcsu;h=36cc5a55e7f3b42c5b449a3279ce6daa1703f8e6;hb=17dfe634fb2e4fbee16103c8ced700001574bdf8;hp=05899d2e5cbf5bc6db13be320324830928aed2ba;hpb=76027c89cb39489ae4a26cb919277c28d791ce3f;p=lxc-userspace.git diff --git a/lxcsu b/lxcsu old mode 100755 new mode 100644 index 05899d2..36cc5a5 --- a/lxcsu +++ b/lxcsu @@ -3,11 +3,13 @@ import setns import os +import sys -from optparse import OptionParser +#from optparse import OptionParser -drop_capabilities='cap_sys_admin,cap_net_admin,cap_sys_boot,cap_sys_module' +drop_capabilities='cap_sys_admin,cap_net_admin,cap_sys_boot,cap_sys_module'.split(',') +""" parser = OptionParser() parser.add_option("-n", "--net", action="store_true", dest="netns", default=False, @@ -20,6 +22,8 @@ parser.add_option("-p", "--pid", help="Enter pid namespace") (options, args) = parser.parse_args() +""" +args = sys.argv[1:] try: slice_name = args[0] @@ -63,4 +67,12 @@ r3 = setns.chcontext(path) open('/proc/lxcsu','w').write(pid) open('/proc/pidsu','w').write(pid) -os.execv('/usr/sbin/capsh',['--drop',drop_capabilities,'--']) + +pid = os.fork() + +cap_args = map(lambda c:'--drop='+c, drop_capabilities) + +if (pid == 0): + os.execv('/usr/sbin/capsh',cap_args+['--']+args[1:]) +else: + os.waitpid(pid,0)