[Users] Prevent IP change in CT with veth interface

[Fabio Sangiovanni]

Hi list,

is there a way to prevent root from changing IP inside a CT with veth 
interfaces?
We use VLANs, so our HNs are configured to create bridges between 
physical NICs and CT veths.
We need to give complete access to some CTs to third parties, but it 
would be great if we could prevent them from changing the IP from inside 
the CT itself.

Thanks for your help!

Fabio