[Bug 1299944] [NEW] lxc-container-default-with-nesting is too lax

[Serge Hallyn]

Public bug reported:

Before cgmanager, lxc-container-default-with-nesting needed to allow the
container to mount fstype=cgroup.  This is no longer needed and is not
safe, therefore should no longer be allowed.

(This ignores the fact that proc and sys mounts under /var/cache/lxc
allow bypassing proc restrictions currently)

** Affects: lxc (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1299944

Title:
  lxc-container-default-with-nesting is too lax

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1299944/+subscriptions