gitolite/c3d2-wiki
gitolite
/
c3d2-wiki
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

*Empty MediaWiki Message*

This commit is contained in:
Daniel.plominski 2015-03-28 15:59:07 +00:00
parent cf4d07e324
commit 114425abc6
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
LXC.mw
View File

@ -354,12 +354,19 @@ lxc.kmsg = 0
#!# lxc.cap.drop = sys_admin
#!# lxc.cap.drop = mknod
#!# lxc.cap.drop = audit_control
#!# lxc.cap.drop = audit_control # breaks sshd (set_loginuid failed)
#!# lxc.cap.drop = audit_write
#!# lxc.cap.drop = setfcap
#!# lxc.cap.drop = setpcap
#!# lxc.cap.drop = sys_resource
#
### lxc.cap.drop = dac_read_search # breaks login (pam unix_chkpwd)
### lxc.cap.drop = setuid # breaks sshd,nfs statd
### lxc.cap.drop = setgid # breaks login (initgroups/setgroups)
### lxc.cap.drop = net_raw # breaks dhcp/ping
#
### lxc.cap.drop = sys_nice
#
lxc.cap.drop = sys_module
lxc.cap.drop = mac_admin
lxc.cap.drop = mac_override