Re: [libvirt] [PATCH 1/2] Don't output libvirt-UUID.files for LXC apparmor profiles

On 07/11/2014 09:22 AM, Serge Hallyn wrote: > Quoting Cédric Bosdonnat (cbosdonnat(a)suse.com): >> --- >> src/security/virt-aa-helper.c | 3 ++- >> 1 file changed, 2 insertions(+), 1 deletion(-) > > Hi, > > I'm acking this anyway bc I think you're right, but I'm trying to > think of a case where this would still be useful. What if we want > to allow only a certain container to have access to its cgroups, > for instance, for nesting containers. Would virt-aa-helper and the > .files be a way this would be done? I suppose we coudl always re-introduce > this in that case... > > Acked-by: Serge E. Hallyn <serge.hallyn(a)ubuntu.com&gt; I've pushed this one.