On 01/11/2012 09:33 AM, Daniel P. Berrange wrote:
From: Daniel P. Berrange berra...@redhat.com
For the sake of backwards compat, LXC guests are *not*
confined by default. This is because it is not practical
to dynamically relabel containers using large filesystem
trees. Applications can
From: Daniel P. Berrange berra...@redhat.com
For the sake of backwards compat, LXC guests are *not*
confined by default. This is because it is not practical
to dynamically relabel containers using large filesystem
trees. Applications can create confined containers though,
by giving suitable XML
