config/templates/userns.conf.in

   1 # CAP_SYS_ADMIN in init-user-ns is required for cgroup.devices
   2 lxc.cgroup.devices.deny =
   3 lxc.cgroup.devices.allow =
   4
   5 # Start with a full set of capabilities in user namespaces.
   6 lxc.cap.drop =
   7 lxc.cap.keep =
   8
   9 # We can't move bind-mounts, so don't use /dev/lxc/
  10 lxc.tty.dir =
  11
  12 # Setup the default mounts
  13 lxc.mount.auto = sys:rw