9137c55411aa39d41c1e705ddc34d5bd26c65021Timo Sirainen# CAP_SYS_ADMIN in init-user-ns is required for cgroup.devices

9137c55411aa39d41c1e705ddc34d5bd26c65021Timo Sirainenlxc.cgroup.devices.deny =

9137c55411aa39d41c1e705ddc34d5bd26c65021Timo Sirainenlxc.cgroup.devices.allow =

9137c55411aa39d41c1e705ddc34d5bd26c65021Timo Sirainen

9137c55411aa39d41c1e705ddc34d5bd26c65021Timo Sirainen# Extra bind-mounts for userns

9137c55411aa39d41c1e705ddc34d5bd26c65021Timo Sirainenlxc.mount.entry = /dev/console dev/console none bind,create=file 0 0

9137c55411aa39d41c1e705ddc34d5bd26c65021Timo Sirainenlxc.mount.entry = /dev/full dev/full none bind,create=file 0 0

9137c55411aa39d41c1e705ddc34d5bd26c65021Timo Sirainenlxc.mount.entry = /dev/null dev/null none bind,create=file 0 0

9137c55411aa39d41c1e705ddc34d5bd26c65021Timo Sirainenlxc.mount.entry = /dev/random dev/random none bind,create=file 0 0

9137c55411aa39d41c1e705ddc34d5bd26c65021Timo Sirainenlxc.mount.entry = /dev/tty dev/tty none bind,create=file 0 0

9137c55411aa39d41c1e705ddc34d5bd26c65021Timo Sirainenlxc.mount.entry = /dev/urandom dev/urandom none bind,create=file 0 0

9137c55411aa39d41c1e705ddc34d5bd26c65021Timo Sirainenlxc.mount.entry = /dev/zero dev/zero none bind,create=file 0 0

9137c55411aa39d41c1e705ddc34d5bd26c65021Timo Sirainen