[Bug 1299944] Re: lxc-container-default-with-nesting is too lax

[Serge Hallyn]

** Description changed:

  Before cgmanager, lxc-container-default-with-nesting needed to allow the
  container to mount fstype=cgroup.  This is no longer needed and is not
  safe, therefore should no longer be allowed.
- 
- (This ignores the fact that proc and sys mounts under /var/cache/lxc
- allow bypassing proc restrictions currently)

** Changed in: lxc (Ubuntu)
       Status: New => Triaged

** Changed in: lxc (Ubuntu)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1299944

Title:
  lxc-container-default-with-nesting is too lax

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1299944/+subscriptions