Skip to content

L
lxc
Unverified Commit 8982c0fd by Stéphane Graber
Options

doc: Mention that veth.pair is ignored for unpriv

veth.pair is ignore for unprivileged containers as allowing an unprivileged user to set a specific device name would allow them to trigger actions in tools like NetworkManager or other uevent based handlers that may react based on specific names or prefixes being used. Signed-off-by: 's avatarStéphane Graber <stgraber@ubuntu.com>
parent 7edae51e
Showing with 3 additions and 1 deletion
doc/lxc.container.conf.sgml.in
......@@ -259,7 +259,9 @@ Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
by <command>lxc</command>, but if you wish to handle
this name yourself, you can tell <command>lxc</command>
to set a specific name with
the <option>lxc.network.veth.pair</option> option.
the <option>lxc.network.veth.pair</option> option (except for
unprivileged containers where this option is ignored for security
reasons).
</para>
<para>
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment