[Lxc-users] [PATCH 1/1] ubuntu template: disallow cap_sys_module (by popular demand)

[Daniel Lezcano]

On 09/15/2011 03:21 PM, Serge E. Hallyn wrote:
> This isn't particularly reassuring, and will be moot with user
> namespaces, but as people are asking for it, turn off sys_module.
> While we're at it, turn off mac_admin and mac_override.
>
> Signed-off-by: Serge Hallyn <serge.hallyn at canonical.com>
> ---
Applied.