namespace: add support for custom kdbus endpoint

If a path to a previously created custom kdbus endpoint is passed in,
bind-mount a new devtmpfs that contains a 'bus' node, which in turn in
bind-mounted with the custom endpoint. This tmpfs then mounted over the
kdbus subtree that refers to the current bus.

This way, we can fake the bus node in order to lock down services with
a kdbus custom endpoint policy.
This commit is contained in:
Daniel Mack
2014-09-08 14:12:56 +02:00
committed by Daniel Mack
parent 5019962312
commit a610cc4f18
4 changed files with 93 additions and 1 deletions
+1
View File
@@ -1523,6 +1523,7 @@ static int exec_child(ExecCommand *command,
context->inaccessible_dirs,
tmp,
var,
NULL,
context->private_devices,
context->protect_home,
context->protect_system,