Hello all, hope all is well Issue: Any way to give granular mknod capabilities to a container? Only allow creation of specific device?
bit of background Have a laptop running arch and libvirt loading an arch lxc container created from lxc-create Overall container is up and running, I use it for vpn connections Initially it would not setup of the tun device. Previously using just the lxc tool set, I can edit the lxc.conf config file for the container and allow device creation of just the tun device. In libvirt I can add capabilities for mknod, but seems to be blanket for any device creation within the container? Is this correct? Thanks and Regards
_______________________________________________ libvirt-users mailing list libvirt-users@redhat.com https://www.redhat.com/mailman/listinfo/libvirt-users