CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC hotunplug code
CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC hotunplug code

Rewrite multiple hotunplug functions to to use the
virProcessRunInMountNamespace helper. This avoids
risk of a malicious guest replacing /dev with an absolute
symlink, tricking the driver into changing the host OS
filesystem.

Signed-off-by: Daniel P. Berrange <bb938cf255e055ff3507f2627d214e8e62118fcf@redhat.com>

agx/libvirt,jardasgit/libvirt,taget/libvirt,agx/libvirt,zippy2/libvirt,crobinso/libvirt,crobinso/libvirt,nertpinx/libvirt,datto/libvirt,datto/libvirt,zippy2/libvirt,nertpinx/libvirt,fabianfreyer/libvirt,jfehlig/libvirt,VenkatDatta/libvirt,jfehlig/libvirt,jardasgit/libvirt,datto/libvirt,olafhering/libvirt,eskultety/libvirt,nertpinx/libvirt,crobinso/libvirt,fabianfreyer/libvirt,nertpinx/libvirt,fabianfreyer/libvirt,andreabolognani/libvirt,libvirt/libvirt,nertpinx/libvirt,taget/libvirt,agx/libvirt,jfehlig/libvirt,VenkatDatta/libvirt,rlaager/libvirt,olafhering/libvirt,rlaager/libvirt,datto/libvirt,rlaager/libvirt,eskultety/libvirt,olafhering/libvirt,olafhering/libvirt,jardasgit/libvirt,shugaoye/libvirt,elmarco/libvirt,elmarco/libvirt,taget/libvirt,eskultety/libvirt,VenkatDatta/libvirt,shugaoye/libvirt,VenkatDatta/libvirt,agx/libvirt,andreabolognani/libvirt,eskultety/libvirt,jardasgit/libvirt,elmarco/libvirt,taget/libvirt,crobinso/libvirt,andreabolognani/libvirt,rlaager/libvirt,datto/libvirt,zippy2/libvirt,elmarco/libvirt,taget/libvirt,zippy2/libvirt,libvirt/libvirt,andreabolognani/libvirt,libvirt/libvirt,shugaoye/libvirt,jfehlig/libvirt,fabianfreyer/libvirt,fabianfreyer/libvirt,elmarco/libvirt,eskultety/libvirt,andreabolognani/libvirt,libvirt/libvirt,VenkatDatta/libvirt,rlaager/libvirt,agx/libvirt,shugaoye/libvirt,shugaoye/libvirt,jardasgit/libvirt