conf/debian-jessie: Prevent access to pci devices
See upstream commit: lxc-2.0.0.rc10-9-g4845c17 [Prevent access to pci devices]
This commit is contained in:
parent
8fb6c1cee4
commit
66bd623a93
1 changed files with 1 additions and 1 deletions
|
@ -13,7 +13,7 @@ lxc.tty = 4
|
||||||
lxc.pts = 1024
|
lxc.pts = 1024
|
||||||
|
|
||||||
# Default capabilities
|
# Default capabilities
|
||||||
lxc.cap.drop = sys_module mac_admin mac_override sys_time
|
lxc.cap.drop = sys_module mac_admin mac_override sys_time sys_rawio
|
||||||
|
|
||||||
# When using LXC with apparmor, the container will be confined by default.
|
# When using LXC with apparmor, the container will be confined by default.
|
||||||
# If you wish for it to instead run unconfined, copy the following line
|
# If you wish for it to instead run unconfined, copy the following line
|
||||||
|
|
Loading…
Reference in a new issue