[lxc-devel] LXCFS update problems

[Stéphane Graber]

On Thu, Nov 19, 2015 at 07:04:04PM +0100, Dietmar Maurer wrote:
> > > Sorry, I should have proofread my reply.  I combined several thoughts.
> > > 
> > > In summary, I think yours is the best we can do - thanks!  I intend to
> > > add that to the lxcfs package, and then hopefully put the init scripts
> > > into the git tree as well.
> > 
> > Hm, but in the case of security updates this is not what we want.
> 
> Maybe, but breaking existing containers is even worse. So I would
> do the following steps for now:

No, on security update, breaking all containers is far better than
having any container be able to run stuff as root on your host.

> 
> 1.) Update the lxcfs.service as suggested
> 
> 2.) Find a better solution. I still do not understand the suggestion you 
> made, so I need to play around with those ideas tomorrow.

-- 
Stéphane Graber
Ubuntu developer
http://www.ubuntu.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.linuxcontainers.org/pipermail/lxc-devel/attachments/20151119/2f736a71/attachment.sig>