On 10/09/18 02:52, Christian Brauner wrote: >> So my understanding is: The systemd service file tries to restrict what >> the service can access, for security, by altering the devices.list >> >> The container won't let anything mess with devices.list, for security. >> >> The two can't both happen at the same time. > Yes. > >> Is that about right? >> >> Is it not possible to say "you can make it tighter, but not looser"? > Yes. > >> I guess I just add it to my logcheck ignores and carry on? > Yes. > > :) > Christian >
Thanks :-) Where's the best place to read more about this? Thanks, Richard
signature.asc
Description: OpenPGP digital signature
_______________________________________________ lxc-users mailing list [email protected] http://lists.linuxcontainers.org/listinfo/lxc-users
