On Fri, 2014-07-11 at 11:03 -0600, Eric Blake wrote: > On 07/11/2014 09:22 AM, Serge Hallyn wrote: > > Quoting Cédric Bosdonnat (cbosdonnat@xxxxxxxx): > >> --- > >> src/security/virt-aa-helper.c | 3 ++- > >> 1 file changed, 2 insertions(+), 1 deletion(-) > > > > Hi, > > > > I'm acking this anyway bc I think you're right, but I'm trying to > > think of a case where this would still be useful. What if we want > > to allow only a certain container to have access to its cgroups, > > for instance, for nesting containers. Would virt-aa-helper and the > > .files be a way this would be done? I suppose we coudl always re-introduce > > this in that case... > > > > Acked-by: Serge E. Hallyn <serge.hallyn@xxxxxxxxxx> > > I've pushed this one. > Huh, I found a regression with this one... sent a v2 earlier today. -- Cedric -- libvir-list mailing list libvir-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvir-list