plamo.common.conf.in revision bf3e09c00eab82850782ad6ec74e4403d84ae866
5f5870385cff47efd2f58e7892f251cf13761528Timo Sirainen# Default console settings
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainenlxc.tty = 4
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainenlxc.pts = 1024
16f816d3f3c32ae3351834253f52ddd0212bcbf3Timo Sirainen
e015e2f7e7f48874495f9df8b0dd192b7ffcb5ccTimo Sirainen# Default mount
e015e2f7e7f48874495f9df8b0dd192b7ffcb5ccTimo Sirainenlxc.mount.auto = proc sys cgroup
58be9d6bcc3800f5b3d76a064ee767fbe31a5a8aTimo Sirainen
1098fc409a45e7603701dc94635927a673bee0c1Timo Sirainen# Default capabilities
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainenlxc.cap.drop = sys_module mac_admin mac_override sys_time
18d92dbbb752c79dc461514e52f7ef11847e636bTimo Sirainen
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainenlxc.cgroup.devices.deny = a
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# /dev/null and zero
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainenlxc.cgroup.devices.allow = c 1:3 rwm
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainenlxc.cgroup.devices.allow = c 1:5 rwm
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# consoles
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainenlxc.cgroup.devices.allow = c 5:0 rwm
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainenlxc.cgroup.devices.allow = c 5:1 rwm
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainen# /dev/{,u}random
e8fd7988ec183fb6c104aed19a61f1a096c51d34Timo Sirainenlxc.cgroup.devices.allow = c 1:8 rwm
e8fd7988ec183fb6c104aed19a61f1a096c51d34Timo Sirainenlxc.cgroup.devices.allow = c 1:9 rwm
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainenlxc.cgroup.devices.allow = c 5:2 rwm
0cb2e8eb55e70f8ebe1e8349bdf49e4cbe5d8834Timo Sirainenlxc.cgroup.devices.allow = c 136:* rwm
6bc0f424bcdb9119d8159874cf98adfa53eefd9aTimo Sirainen# rtc
6bc0f424bcdb9119d8159874cf98adfa53eefd9aTimo Sirainenlxc.cgroup.devices.allow = c 254:0 rm
6bc0f424bcdb9119d8159874cf98adfa53eefd9aTimo Sirainen# fuse
6bc0f424bcdb9119d8159874cf98adfa53eefd9aTimo Sirainenlxc.cgroup.devices.allow = c 10:229 rwm
6bc0f424bcdb9119d8159874cf98adfa53eefd9aTimo Sirainen