Skip to content

L
lxc
Commit 6ff9f8ec by Natanael Copa Committed by Stéphane Graber
Options

lxc-alpine: disable sys_admin by default

It is normally not needed. Signed-off-by: 's avatarNatanael Copa <ncopa@alpinelinux.org> Acked-by: 's avatarStéphane Graber <stgraber@ubuntu.com>
parent 8a3c76b2
Showing with 1 addition and 1 deletion
templates/lxc-alpine.in
...@@ -199,7 +199,7 @@ EOF ...@@ -199,7 +199,7 @@ EOF
lxc.tty = 4 lxc.tty = 4
lxc.pts = 1024 lxc.pts = 1024
lxc.utsname = $hostname lxc.utsname = $hostname
lxc.cap.drop = sys_module mac_admin mac_override sys_time lxc.cap.drop = sys_module mac_admin mac_override sys_time sys_admin
# When using LXC with apparmor, uncomment the next line to run unconfined: # When using LXC with apparmor, uncomment the next line to run unconfined:
#lxc.aa_profile = unconfined #lxc.aa_profile = unconfined
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment