On Wed, Nov 13, 2013 at 04:51:43PM +0800, Chen Hanxiao wrote: > From: Chen Hanxiao <chenhanx...@cn.fujitsu.com> > > If we enable userns, we could bind mount > some dirs from host to guest, which don't belong to > the target mapped uid/gid. > > Such as we could bind mount root's dirs to guest. > What is worse, we could even modify root's files > in that bind dir inside container.
I still can't see what the problem is from the description here. Please can you give a clear example of the config used and exactly what goes wrong. Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :| -- libvir-list mailing list libvir-list@redhat.com https://www.redhat.com/mailman/listinfo/libvir-list
