[Devel] RE: Building a SECURE cointainer using Cgroups ?

Dave Hansen dave at linux.vnet.ibm.com
Mon Oct 13 11:25:41 PDT 2008


On Mon, 2008-10-13 at 11:01 -0700, Tanaka, Thomas wrote:
> Yes absolutely that is what I am trying to achieve.

I'm going to put on my Serge hat and bet that you can do it with
security modules. :)

There's nothing that cgroups or containers gives you that will help with
your problem.  We actually haven't touched the fs namespaces at all, yet
because they work great as they stand today.

-- Dave

_______________________________________________
Containers mailing list
Containers at lists.linux-foundation.org
https://lists.linux-foundation.org/mailman/listinfo/containers




More information about the Devel mailing list