[libvirt-users] Attempt to define unprivileged LXC by libvirt

Daniel P. Berrangé berrange at redhat.com
Fri Mar 23 13:31:45 UTC 2018


On Fri, Mar 23, 2018 at 02:28:11PM +0100, ales drtik wrote:
> Thanks for info about that.
> This means to use apparmor mandatory, isn't it true?

If you enable user namespaces for the container that is sufficient to provide
a secure config. None the less we still recommend /also/ adding MAC like
SELinux or AppArmor on top.

Regards,
Daniel
-- 
|: https://berrange.com      -o-    https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org         -o-            https://fstop138.berrange.com :|
|: https://entangle-photo.org    -o-    https://www.instagram.com/dberrange :|




More information about the libvirt-users mailing list