[lxc-users] Failed to reset devices.list (etc)

[Richard Hector]

On 10/09/18 02:52, Christian Brauner wrote:
>> So my understanding is: The systemd service file tries to restrict what
>> the service can access, for security, by altering the devices.list
>>
>> The container won't let anything mess with devices.list, for security.
>>
>> The two can't both happen at the same time.
> Yes.
> 
>> Is that about right?
>>
>> Is it not possible to say "you can make it tighter, but not looser"?
> Yes.
> 
>> I guess I just add it to my logcheck ignores and carry on?
> Yes.
> 
> :)
> Christian
> 

Thanks :-)

Where's the best place to read more about this?

Thanks,
Richard

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20180910/68efe1eb/attachment.sig>