Cédric Bosdonnat 9265f8ab67 Rework lxc apparmor profile ... Rework the apparmor lxc profile abstraction to mimic ubuntu's container-default. This profile allows quite a lot, but strives to restrict access to dangerous resources. Removing the explicit authorizations to bash, systemd and cron files, forces them to keep the lxc profile for all applications inside the container. PUx permissions where leading to running systemd (and others tasks) unconfined. Put the generic files, network and capabilities restrictions directly in the TEMPLATE.lxc: this way, users can restrict them on a per container basis.		2014-07-15 12:57:05 -06:00
..
apparmor	Rework lxc apparmor profile	2014-07-15 12:57:05 -06:00
dominfo	Indent top-level labels by one space in examples/	2014-03-25 14:58:38 +01:00
dommigrate	Add a new example to illustrate domain migration	2014-04-30 14:29:07 +01:00
domsuspend	Indent top-level labels by one space in examples/	2014-03-25 14:58:38 +01:00
hellolibvirt	Indent top-level labels by one space in examples/	2014-03-25 14:58:38 +01:00
lxcconvert	virt-lxc-convert: make free return values in bytes	2014-07-07 12:37:23 +02:00
object-events	maint: align whitespaces with project conventions.	2014-01-20 14:35:08 +01:00
openauth	Indent top-level labels by one space in examples/	2014-03-25 14:58:38 +01:00
systemtap	maint: use LGPL correctly	2013-05-20 14:03:48 -06:00
xml	build: only install nwfilter examples when building nwfilter	2013-09-04 13:48:27 -06:00