Abin Shahab d821c63e0d use lxc.auto.mount to ensure proc and sys are readonly ... Set lxc.auto.mount = proc:mixed in unprivilged mode. This ensures that lxc mounts sys and proc/sysrq-trigger as readonly. Signed-off-by: Abin Shahab <ashahab@altiscale.com> (github: ashahab-altiscale) Docker-DCO-1.1-Signed-off-by: Abin Shahab <ashahab@altiscale.com> (github: ashahab-altiscale)		2015-01-18 09:27:16 +00:00
..
MAINTAINERS	execdriver/lxc: add comment to MAINTAINERS	2014-11-08 16:27:25 +02:00
driver.go	Fix vet errors about unkeyed fields	2014-12-12 10:44:59 -08:00
info.go	Rename runtime/* to daemon/*	2014-04-17 14:43:01 -07:00
info_test.go	Rename runtime/* to daemon/*	2014-04-17 14:43:01 -07:00
init.go	LXC CAP ADD CAP DROP IN TEMPLATE	2014-12-05 23:08:22 +00:00
lxc_init_linux.go	Update lxc with libcontainer SetupUser change	2015-01-12 10:43:33 -08:00
lxc_init_unsupported.go	LXC CAP ADD CAP DROP IN TEMPLATE	2014-12-05 23:08:22 +00:00
lxc_template.go	use lxc.auto.mount to ensure proc and sys are readonly	2015-01-18 09:27:16 +00:00
lxc_template_unit_test.go	SEND CAPABILITY IDS TO LXC	2015-01-17 04:01:52 +00:00