[lxc-devel] [PATCH v2] Remove a comment part from a config value

Michael H. Warfield mhw at WittsEnd.com
Fri Aug 29 01:17:52 UTC 2014


On Fri, 2014-08-29 at 09:27 +0900, KATOH Yasufumi wrote:
> >>> On Thu, 28 Aug 2014 14:52:21 -0400
>     in message   "Re: [lxc-devel] [PATCH v2] Remove a comment part from a config value"
>                   Michael H. Warfield-san wrote:
> 
> > ???
> 
> > Just checked centos.common.conf, oracle.common.conf and
> > fedora.common.conf.  I don't see them.  I do see lines like this:
> 
> > # lxc.cap.drop = net_raw          # breaks dhcp/ping
> > # lxc.cap.drop = setgid           # breaks login (initgroups/setgroups)
> > # lxc.cap.drop = dac_read_search  # breaks login (pam unix_chkpwd)
> > # lxc.cap.drop = setuid           # breaks sshd,nfs statd
> > # lxc.cap.drop = audit_control    # breaks sshd (set_loginuid failed)
> 
> On stable-1.0, centos.common.conf and oracle.common.conf have:
> 
> lxc.cgroup.devices.allow = c 1:3 rwm	# /dev/null
> lxc.cgroup.devices.allow = c 1:5 rwm	# /dev/zero
> lxc.cgroup.devices.allow = c 1:7 rwm	# /dev/full
> lxc.cgroup.devices.allow = c 5:0 rwm	# /dev/tty
> lxc.cgroup.devices.allow = c 1:8 rwm	# /dev/random
> lxc.cgroup.devices.allow = c 1:9 rwm	# /dev/urandom
> lxc.cgroup.devices.allow = c 136:* rwm	# /dev/tty[1-4] ptys and lxc console
> lxc.cgroup.devices.allow = c 5:2 rwm	# /dev/ptmx pty master

Oh.  You said master branch.  That's where I was working.  I didn't look
in the stable-1.0 branch.  My oversight.

Stephane has already remarked that we need to clean those out.

Regards,
Mike
-- 
Michael H. Warfield (AI4NB) | (770) 978-7061 |  mhw at WittsEnd.com
   /\/\|=mhw=|\/\/          | (678) 463-0932 |  http://www.wittsend.com/mhw/
   NIC whois: MHW9          | An optimist believes we live in the best of all
 PGP Key: 0x674627FF        | possible worlds.  A pessimist is sure of it!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 465 bytes
Desc: This is a digitally signed message part
URL: <http://lists.linuxcontainers.org/pipermail/lxc-devel/attachments/20140828/e9451dfd/attachment-0001.sig>


More information about the lxc-devel mailing list