Quoting James Morris (jmorris@xxxxxxxxx): > On Wed, 26 Mar 2008, Serge E. Hallyn wrote: > > > Not only that, but containers require an LSM to provide user isolation > > and root containment. > > You mean LSM hooks, which various LSM could utilize if desired, right? Yes. thanks, -serge -- To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html