The following pull request was submitted through Github. It can be accessed and reviewed at: https://github.com/lxc/lxc/pull/2814
This e-mail was sent by the LXC bot, direct replies will not reach the author unless they happen to be subscribed to this list. === Description (from pull-request) === Signed-off-by: KATOH Yasufumi <ka...@jazz.email.ne.jp>
From 7a8f46e9557efe4c04bbad932942c09ee9625669 Mon Sep 17 00:00:00 2001 From: KATOH Yasufumi <ka...@jazz.email.ne.jp> Date: Mon, 28 Jan 2019 19:01:40 +0900 Subject: [PATCH] doc: Add lxc.seccomp.allow_nesting to Japanese lxc.container.conf(5) Signed-off-by: KATOH Yasufumi <ka...@jazz.email.ne.jp> --- doc/ja/lxc.container.conf.sgml.in | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/doc/ja/lxc.container.conf.sgml.in b/doc/ja/lxc.container.conf.sgml.in index 47ef1c6ef..65ebb44f4 100644 --- a/doc/ja/lxc.container.conf.sgml.in +++ b/doc/ja/lxc.container.conf.sgml.in @@ -2433,6 +2433,24 @@ by KATOH Yasufumi <karma at jazz.email.ne.jp> </para> </listitem> </varlistentry> + <varlistentry> + <term> + <option>lxc.seccomp.allow_nesting</option> + </term> + <listitem> + <para> + <!-- + If this flag is set to 1, then seccomp filters will be stacked + regardless of whether a seccomp profile is already loaded. + This allows nested containers to load their own seccomp profile. + The default setting is 0. + --> + このオプションを 1 に設定すると、すでに seccomp プロファイルがロードされている、いないに関わらず、seccomp フィルタが重ね合わせられます。 + これにより、ネストされたコンテナが自身の seccomp プロファイルをロードできます。 + デフォルト値は 0 です。 + </para> + </listitem> + </varlistentry> </variablelist> </refsect2>
_______________________________________________ lxc-devel mailing list lxc-devel@lists.linuxcontainers.org http://lists.linuxcontainers.org/listinfo/lxc-devel