> Von: lxc-users [mailto:lxc-users-boun...@lists.linuxcontainers.org] Im > Auftrag > > Hi all, > > I've found lxd recently and jumped on it. I've used vserver before but > this is a different league of simplicity and compatibility with stock > kernels. Great work indeed, many thanks to the developers and the > community for supporting and improving this product. > > There are a few issues that I couldn't figure out on my own by looking > on the Internet, so I'm putting them out to the experts: > > - One aspect that drew my attention was the fact that running 'dmesg' > on the containers shows the host's kernel log. This does not look > right to me, is it a configuration fault on the container or the lxd > system?
No, it isn't, see http://seclists.org/fulldisclosure/2015/Mar/89 I find it also strange, that this is not disabled by default. Check http://unix.stackexchange.com/questions/103576/container-lockdown for more info on this and similar. > [Snip] > > Any pointers for addressing these issues would be much appreciated. > > Best regards, > Pedro.
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ lxc-users mailing list lxc-users@lists.linuxcontainers.org http://lists.linuxcontainers.org/listinfo/lxc-users