nspawn: fix DeviceAllow list

Commit 864e17068 ("nspawn: actually allow access to /dev/net/tun in the
container") added "/dev/net/tun" to the list of allowed devices but forgot
to tweak the array length, which caused "/dev/kdbus/*" to be missed.
This commit is contained in:
Daniel Mack
2014-10-17 16:07:12 +02:00
parent 7491ccf2cb
commit 317cde8b80
+1 -1
View File
@@ -1545,7 +1545,7 @@ static int register_machine(pid_t pid, int local_ifindex) {
return r;
}
r = sd_bus_message_append(m, "(sv)", "DeviceAllow", "a(ss)", 10,
r = sd_bus_message_append(m, "(sv)", "DeviceAllow", "a(ss)", 11,
/* Allow the container to
* access and create the API
* device nodes, so that