[lxc-devel] Status of usability of lxc

[richard -rw- weinberger]

On Tue, Mar 22, 2011 at 10:20 AM, Nathan McSween <nwmcsween at gmail.com> wrote:
> Can I get a quick rundown of what is implemented w.r.t  UID/GID
> containerization, is it safe yet to give containerized root to an
> everyday user without huge security issues?

Drop all dangerous capabilities and mount /proc read-only.

HTH,
//richard

> ------------------------------------------------------------------------------
> Xperia(TM) PLAY
> It's a major breakthrough. An authentic gaming
> smartphone on the nation's most reliable network.
> And it wants your games.
> http://p.sf.net/sfu/verizon-sfdev
> _______________________________________________
> Lxc-devel mailing list
> Lxc-devel at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/lxc-devel
>



-- 
Thanks,
//richard