[Lxc-users] Bind mount within an LXC container

[Papp Tamas]

On 01/30/2013 01:13 PM, Ben Butler-Cole wrote:
> Hello
>
> I find that I can't do a read-write bind mount within a container (that is to say, the source and
> target for the mount are both within the container's own filesystem). I believe that it is being
> restricted to read-only by Apparmour.
>
> I understand that there are security reasons for denying bind mounts of the host filesystem into a
> container. Are there similar concerns for mounts within the container?
>
> Is there a way of expressing this (allow read-write bind mounts only within a container) in the
> Apparmour configuration?

Please search the list archives backt to one or two months.
It's definitely easy to setup.

tamas