Branch: refs/heads/master
Home: https://github.com/lxc/lxc
Commit: 33662399da0d6d29a2a49b36fe5394741e068ef0
https://github.com/lxc/lxc/commit/33662399da0d6d29a2a49b36fe5394741e068ef0
Author: Dwight Engen <dwight.en...@oracle.com>
Date: 2013-10-23 (Wed, 23 Oct 2013)
Changed paths:
M templates/lxc-oracle.in
Log Message:
-----------
oracle template: restrict writeability in /proc and /sys
Note that since we don't drop CAP_SYS_ADMIN, root in the container can
remount proc or sys however they want to, however this at least improves
the default situation.
Signed-off-by: Dwight Engen <dwight.en...@oracle.com>
Acked-by: Serge E. Hallyn <serge.hal...@ubuntu.com>
------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135991&iu=/4140/ostg.clktrk
_______________________________________________
Lxc-devel mailing list
Lxc-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-devel
