Re: [lxc-devel] [PATCH] Improve behaviour for unprivileged users

2013-10-02 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): > This mostly changes two things: > - Only log to the container's logfile on start/stop/restart/execute > - Call may_control() every time we use the API and return >"Insufficient privileges" on failure. > > NOTE: I didn't test every single one o

[lxc-devel] [PATCH] Improve behaviour for unprivileged users

2013-10-02 Thread Stéphane Graber
This mostly changes two things: - Only log to the container's logfile on start/stop/restart/execute - Call may_control() every time we use the API and return "Insufficient privileges" on failure. NOTE: I didn't test every single one of those but I'm fairly confident in my copy/paste abi