[pve-devel] [PATCH container 1/5] config: whitelist lxc.cgroup2 raw keys

Wolfgang Bumiller w.bumiller at proxmox.com
Thu Apr 9 12:55:28 CEST 2020


Signed-off-by: Wolfgang Bumiller <w.bumiller at proxmox.com>
---
 src/PVE/LXC/Config.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/PVE/LXC/Config.pm b/src/PVE/LXC/Config.pm
index 1aab6d4..77642d8 100644
--- a/src/PVE/LXC/Config.pm
+++ b/src/PVE/LXC/Config.pm
@@ -606,7 +606,7 @@ sub is_valid_lxc_conf_key {
     }
     my $validity = $valid_lxc_conf_keys->{$key};
     return $validity if defined($validity);
-    return 1 if $key =~ /^lxc\.cgroup\./  # allow all cgroup values
+    return 1 if $key =~ /^lxc\.cgroup2?\./  # allow all cgroup values
              || $key =~ /^lxc\.prlimit\./ # allow all prlimits
              || $key =~ /^lxc\.net\./;    # allow custom network definitions
     return 0;
-- 
2.20.1





More information about the pve-devel mailing list