CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC chardev hostdev hotplug
CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC chardev hostdev hotplug

Rewrite lxcDomainAttachDeviceHostdevMiscLive function
to use the virProcessRunInMountNamespace helper. This avoids
risk of a malicious guest replacing /dev with a absolute
symlink, tricking the driver into changing the host OS
filesystem.

Signed-off-by: Daniel P. Berrange <bb938cf255e055ff3507f2627d214e8e62118fcf@redhat.com>

datto/libvirt,agx/libvirt,jardasgit/libvirt,libvirt/libvirt,taget/libvirt,rlaager/libvirt,elmarco/libvirt,VenkatDatta/libvirt,nertpinx/libvirt,jfehlig/libvirt,eskultety/libvirt,andreabolognani/libvirt,libvirt/libvirt,olafhering/libvirt,olafhering/libvirt,taget/libvirt,zippy2/libvirt,datto/libvirt,jardasgit/libvirt,fabianfreyer/libvirt,jardasgit/libvirt,rlaager/libvirt,shugaoye/libvirt,crobinso/libvirt,jardasgit/libvirt,datto/libvirt,agx/libvirt,eskultety/libvirt,shugaoye/libvirt,rlaager/libvirt,eskultety/libvirt,andreabolognani/libvirt,nertpinx/libvirt,agx/libvirt,libvirt/libvirt,VenkatDatta/libvirt,rlaager/libvirt,eskultety/libvirt,nertpinx/libvirt,fabianfreyer/libvirt,crobinso/libvirt,datto/libvirt,VenkatDatta/libvirt,rlaager/libvirt,elmarco/libvirt,andreabolognani/libvirt,nertpinx/libvirt,andreabolognani/libvirt,zippy2/libvirt,olafhering/libvirt,jfehlig/libvirt,shugaoye/libvirt,jfehlig/libvirt,crobinso/libvirt,zippy2/libvirt,taget/libvirt,shugaoye/libvirt,fabianfreyer/libvirt,jfehlig/libvirt,crobinso/libvirt,andreabolognani/libvirt,zippy2/libvirt,VenkatDatta/libvirt,taget/libvirt,agx/libvirt,fabianfreyer/libvirt,elmarco/libvirt,eskultety/libvirt,elmarco/libvirt,nertpinx/libvirt,jardasgit/libvirt,agx/libvirt,libvirt/libvirt,fabianfreyer/libvirt,taget/libvirt,olafhering/libvirt,shugaoye/libvirt,elmarco/libvirt,datto/libvirt,VenkatDatta/libvirt