[Bug 917660] Re: Installing qemu-user-static in an i386 lxc container applies the binfmt changes to the host, breaking execution in that host

[Serge Hallyn]

@Andy -- that depends on whether we consider the kernel part of this a
bug or not.

For lxc it'll be fixed with an apparmor policy shipped with lxc.

For update-binfmts more generally,  there might be  way for that program
to be smarter.

But still the kernel itself is reading over proc and/or sys files, so
there's the question of how far we go to protect the admin from himself.


My take right now:  the container admin may be separate from the host
admin, so we need the lxc policy.  For the rest, update-binfmts and the
kernel part can only be used by the host admin, so we let him shoot
himself in the foot.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/917660

Title:
  Installing qemu-user-static in an i386 lxc container applies the
  binfmt changes to the host, breaking execution in that host

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/binfmt-support/+bug/917660/+subscriptions