[Bug 645625] Re: lxc container can power-off host machine

[Serge Hallyn]

Quoting Lawrance (lawrancejing at gmail.com):
> can somebody show we how to solve this problem with appamor, i install openstack with lxc installed, and i can use "echo b > /proc/sysrq-trigger" to power-off host.
> sorry,i'am newbie to appamor...
> thanks

Openstack uses libvirt-lxc.  The apparmor policies are in effect for
containers created and started through the lxc package, which is a
completely different source unfortunately.  Adding apparmor protections
will need to either be done separately in libvirt source, or achieved by
writing a new libvirt lxc driver which uses our lxc package.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/645625

Title:
  lxc container can power-off host machine

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/645625/+subscriptions