X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=lxcsu;h=6bcf2e38dcaf51a88c601eff8e21f2779fa22faf;hb=3469e5df63fd3a9d4614d779d75cfa8787a3e54e;hp=05899d2e5cbf5bc6db13be320324830928aed2ba;hpb=76027c89cb39489ae4a26cb919277c28d791ce3f;p=lxc-userspace.git diff --git a/lxcsu b/lxcsu old mode 100755 new mode 100644 index 05899d2..6bcf2e3 --- a/lxcsu +++ b/lxcsu @@ -3,11 +3,13 @@ import setns import os +import sys -from optparse import OptionParser +#from optparse import OptionParser -drop_capabilities='cap_sys_admin,cap_net_admin,cap_sys_boot,cap_sys_module' +drop_capabilities='cap_sys_admin,cap_net_admin,cap_sys_boot,cap_sys_module'.split(',') +""" parser = OptionParser() parser.add_option("-n", "--net", action="store_true", dest="netns", default=False, @@ -20,6 +22,8 @@ parser.add_option("-p", "--pid", help="Enter pid namespace") (options, args) = parser.parse_args() +""" +args = sys.argv[1:] try: slice_name = args[0] @@ -56,6 +60,14 @@ if (not slice_spec or not pid): print "Not started: %s"%slice_name exit(1) +# Enter cgroups +try: + for subsystem in ['cpuset','memory','fs','blkio']: + open('/sys/fs/cgroup/%s/libvirt/tasks'%subsystem,'w').write(pid) +except: + print "Error assigning resources: %s"%slice_name + exit(1) + r1 = setns.chcontext('/proc/%s/ns/utc'%pid) r2 = setns.chcontext('/proc/%s/ns/ipc'%pid) path = '/proc/%s/ns/net'%pid @@ -63,4 +75,14 @@ r3 = setns.chcontext(path) open('/proc/lxcsu','w').write(pid) open('/proc/pidsu','w').write(pid) -os.execv('/usr/sbin/capsh',['--drop',drop_capabilities,'--']) + + + +pid = os.fork() + +cap_args = map(lambda c:'--drop='+c, drop_capabilities) + +if (pid == 0): + os.execv('/usr/sbin/capsh',cap_args+['--']+args[1:]) +else: + os.waitpid(pid,0)