git.proxmox.com Git - mirror_lxc.git/commit

]> git.proxmox.com Git - mirror_lxc.git/commit - templates/lxc-busybox.in

author	Serge Hallyn <serge.hallyn@ubuntu.com>
	Wed, 1 May 2013 13:33:12 +0000 (08:33 -0500)
committer	Serge Hallyn <serge.hallyn@ubuntu.com>
	Wed, 1 May 2013 19:00:41 +0000 (14:00 -0500)
commit	eee3ba81c88e64b8a732694fc4843a39d5bde491
tree	d99eb521d7dd964a77a103f9425cfeb85d561463	tree
parent	ee25a44fd389ed450e3d7ef9513eec19668f2de7	commit \| diff

templates: deny writes to host's clock (v2)

Don't allow write to /dev/rtc0, and remove sys_time.

Thanks, Christoph.

v2: drop sys_time, sys_module, mac_admin and mac_override in
all templates.

Reported-by: Christoph Mitasch <cmitasch@thomas-krenn.com>
Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

templates/lxc-alpine.in		diff \| blob \| blame \| history
templates/lxc-altlinux.in		diff \| blob \| blame \| history
templates/lxc-archlinux.in		diff \| blob \| blame \| history
templates/lxc-busybox.in		diff \| blob \| blame \| history
templates/lxc-debian.in		diff \| blob \| blame \| history
templates/lxc-fedora.in		diff \| blob \| blame \| history
templates/lxc-opensuse.in		diff \| blob \| blame \| history
templates/lxc-sshd.in		diff \| blob \| blame \| history
templates/lxc-ubuntu-cloud.in		diff \| blob \| blame \| history
templates/lxc-ubuntu.in		diff \| blob \| blame \| history

LXC mirror

RSS Atom