[lxc-devel] cgroup isolation

[Denis Rizaev]

Hi folks.
I tried to mount cgroup fs in container and was surprised that i can see all
cgroups tree. Also i can modify limits for my container and others!!
In my opinion container should see only it's own level of cgroup, not whole
tree.
Is it fundamental design flaw, or i missed something?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxcontainers.org/pipermail/lxc-devel/attachments/20100827/584bd1f8/attachment.html>