[libvirt-users] Attempt to define unprivileged LXC by libvirt
Daniel P. Berrangé
berrange at redhat.com
Fri Mar 23 13:31:45 UTC 2018
On Fri, Mar 23, 2018 at 02:28:11PM +0100, ales drtik wrote:
> Thanks for info about that.
> This means to use apparmor mandatory, isn't it true?
If you enable user namespaces for the container that is sufficient to provide
a secure config. None the less we still recommend /also/ adding MAC like
SELinux or AppArmor on top.
Regards,
Daniel
--
|: https://berrange.com -o- https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org -o- https://fstop138.berrange.com :|
|: https://entangle-photo.org -o- https://www.instagram.com/dberrange :|
More information about the libvirt-users
mailing list