Add some security options

3282889c · Antoine Catton · 0a49a29b · 3282889c · 3282889c
Commit 3282889c authored Aug 14, 2012 by Antoine Catton
Show whitespace changes
Inline Side-by-side

Showing with 3 additions and 1 deletion

software/lxc/lxc.conf.in software/lxc/lxc.conf.in +2 -0

software/lxc/software.cfg software/lxc/software.cfg +1 -1

No files found.
--- a/software/lxc/lxc.conf.in
+++ b/software/lxc/lxc.conf.in
@@ -25,3 +25,5 @@ lxc.cgroup.devices.allow = c 5:2 rwm
 lxc.cgroup.devices.allow = c 254:0 rwm

 lxc.rootfs = %(rootfs)s
+
+lxc.cap.drop = sys_module sys_time sys_chroot mknod
--- a/software/lxc/software.cfg
+++ b/software/lxc/software.cfg
@@ -41,7 +41,7 @@ mode = 0644
 recipe = hexagonit.recipe.download
 url = ${:_profile_base_location_}/${:filename}
 filename = lxc.conf.in
-md5sum = 47cf7520c17c964d4d93608d6785a6a3
+md5sum = e47acb30a9783d2f264b51b3c46262ae
 download-only = true

 [slapos-toolbox]