Quoting Daniel P. Berrange (berrange(a)redhat.com):
This patch attached now just makes it MS_SLAVE. There's no need
for the
extra SHARED flag, since the only process libvirt_lxc spawns is the 'init'
process inside the container and that immediately makes its own root
private.
Thanks, this looks good.
Acked-by: Serge Hallyn <serue(a)us.ibm.com>
-serge