[lxc-users] How do I "add an ACL for the container root"?

[Dun Peal]

I'm trying to start a vanilla CentOS 6 container on an Ubuntu 15.10
host running latest stable LXC (1.1.5). It fails with due to lack of
permission to access ~/.local. The error message suggests granting 'x'
permission on the relevant directory, or 'add an ACL for the container
root'.

I understand the first suggestion (which to me seems unclean - setting
global 'x' permission on an important directory like ~/.local), but
what exactly does the second suggestion "add an ACL for the container
root" entail?

Error message attached:

$ lxc-start -n centos6 -F
lxc-start: start.c: print_top_failing_dir: 102 Permission denied -
could not access /home/dunpeal/.local.  Please grant it 'x' access, or
add an ACL for the container root.
lxc-start: sync.c: __sync_wait: 51 invalid sequence number 1. expected 2
lxc-start: start.c: __lxc_start: 1213 failed to spawn 'centos6'
lxc-start: lxc_start.c: main: 344 The container failed to start.
lxc-start: lxc_start.c: main: 348 Additional information can be
obtained by setting the --logfile and --logpriority options.