[lxc-devel] [PATCH] lxc-attach: elevate specific privileges

[Nikola Kotur]

On Wed, 20 Nov 2013 09:35:51 -0600
Serge Hallyn <serge.hallyn at ubuntu.com> wrote:

> > > I also notice that currently it seems broken as the manpage says
> > > that -R should imply -e
> > 
> > Actually, it's not -R that implies -e, it's the -s option
> 
> I was sure I saw a comment about -R implying -e, but I don't see it
> now, so that's fine :)

Great!

> > while not elevating cgroup, for example?  
>
> But I suspect there's a simpler rationale.

Christian Seiler provided the explanation (he wrote the code in
question), but I was struggling to get to the bottom of that as well.

-- 
Nikola Kotur
http://blog.kotur.org

PGP key: http://bin.kotur.org/key.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: not available
URL: <http://lists.linuxcontainers.org/pipermail/lxc-devel/attachments/20131120/d52d50dd/attachment.pgp>