core: fall back to bind-mounts for PrivateDevices= execution environments
authorChristian Brauner <christian.brauner@ubuntu.com>
Fri, 9 Mar 2018 13:49:15 +0000 (14:49 +0100)
committerZbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
Thu, 12 Apr 2018 16:15:12 +0000 (18:15 +0200)
commit16498617443da94533ef9ae28be0ffaace40c526
tree22f2616cbe192c1da669928167d3829b2547f636
parent1238250f1dca07b8fcef4d7ebe86891334819e9e
core: fall back to bind-mounts for PrivateDevices= execution environments

In environments where CAP_MKNOD is not available or inside
user namespaces it is still desirable to enable services to use
PrivateDevices= . So fall back to using bind-mounts on EPERM.
src/core/namespace.c