[Devel] Re: [patch 2/2] Remove the ns_cgroup
Serge E. Hallyn
serue at us.ibm.com
Mon Dec 28 15:36:11 PST 2009
Quoting Daniel Lezcano (daniel.lezcano at free.fr):
> The ns_cgroup is an annoying cgroup at the namespace / cgroup frontier.
True. However, it remains - apart from using smack or SELinux - the
only way to truly lock a container into a cgroup configuration. That's
unlikely to change until we finally support user namespaces in the VFS.
Do we worry about that?
-serge
_______________________________________________
Containers mailing list
Containers at lists.linux-foundation.org
https://lists.linux-foundation.org/mailman/listinfo/containers
More information about the Devel
mailing list