From patchwork Mon Apr 11 21:02:47 2016 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Cole Robinson X-Patchwork-Id: 65572 Delivered-To: patch@linaro.org Received: by 10.140.93.198 with SMTP id d64csp1568642qge; Mon, 11 Apr 2016 14:05:29 -0700 (PDT) X-Received: by 10.140.130.14 with SMTP id 14mr33135616qhc.85.1460408729742; Mon, 11 Apr 2016 14:05:29 -0700 (PDT) Return-Path: Received: from mx5-phx2.redhat.com (mx5-phx2.redhat.com. [209.132.183.37]) by mx.google.com with ESMTPS id h81si21763513qhc.41.2016.04.11.14.05.28 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Mon, 11 Apr 2016 14:05:29 -0700 (PDT) Received-SPF: pass (google.com: domain of libvir-list-bounces@redhat.com designates 209.132.183.37 as permitted sender) client-ip=209.132.183.37; Authentication-Results: mx.google.com; spf=pass (google.com: domain of libvir-list-bounces@redhat.com designates 209.132.183.37 as permitted sender) smtp.mailfrom=libvir-list-bounces@redhat.com Received: from lists01.pubmisc.prod.ext.phx2.redhat.com (lists01.pubmisc.prod.ext.phx2.redhat.com [10.5.19.33]) by mx5-phx2.redhat.com (8.14.4/8.14.4) with ESMTP id u3BL2pjk045769; Mon, 11 Apr 2016 17:02:51 -0400 Received: from int-mx09.intmail.prod.int.phx2.redhat.com (int-mx09.intmail.prod.int.phx2.redhat.com [10.5.11.22]) by lists01.pubmisc.prod.ext.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id u3BL2ngn010859 for ; Mon, 11 Apr 2016 17:02:49 -0400 Received: from colepc.redhat.com (ovpn-113-40.phx2.redhat.com [10.3.113.40]) by int-mx09.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id u3BL2nh0014614; Mon, 11 Apr 2016 17:02:49 -0400 From: Cole Robinson To: libvirt-list@redhat.com Date: Mon, 11 Apr 2016 17:02:47 -0400 Message-Id: <8a7a9a6824c012112f444632c13ff0acb0bad518.1460408567.git.crobinso@redhat.com> X-Scanned-By: MIMEDefang 2.68 on 10.5.11.22 X-loop: libvir-list@redhat.com Subject: [libvirt] [PATCH] man: virsh: Document lxc-enter-namespace --noseclabel X-BeenThere: libvir-list@redhat.com X-Mailman-Version: 2.1.12 Precedence: junk List-Id: Development discussions about the libvirt library & tools List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , MIME-Version: 1.0 Sender: libvir-list-bounces@redhat.com Errors-To: libvir-list-bounces@redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1147737 --- tools/virsh.pod | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) -- 2.7.3 -- libvir-list mailing list libvir-list@redhat.com https://www.redhat.com/mailman/listinfo/libvir-list diff --git a/tools/virsh.pod b/tools/virsh.pod index d2cc5b2..d8502c7 100644 --- a/tools/virsh.pod +++ b/tools/virsh.pod @@ -4170,7 +4170,7 @@ When I<--timestamp> is used, a human-readable timestamp will be printed before the event, and the timing information provided by QEMU will be omitted. -=item B I -- /path/to/binary [arg1, [arg2, ...]] +=item B I [I<--noseclabel>] -- /path/to/binary [arg1, [arg2, ...]] Enter the namespace of I and execute the command C passing the requested args. The binary path is relative to the container @@ -4179,6 +4179,10 @@ environment variables / console visible to virsh. This command only works when connected to the LXC hypervisor driver. This command succeeds only if C has 0 exit status. +By default the new process will run with the security label of the new +parent container. Use the I<--noseclabel> option to instead have the +process keep the same security label as C. + =back =head1 ENVIRONMENT