[lxc-devel] fix security holes when running lxc as non-root

[Daniel Lezcano]

Thanks all for the feedbacks.

The following patchset provides an intermediate solution between
all the remarks about the security aspects when running lxc with
the capabilities.

It has the advantage to be compatible with the setuid bit root set
on the lxc-start and lxc-execute.

More work has to be done, but I prefer to send these patches now as
they are critical in terms of security.