mirror of https://github.com/mkerrisk/man-pages
cgroup_namespaces.7: tfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
parent
ef6f953968
commit
a531b2cf57
|
@ -166,7 +166,7 @@ system when migrating a container;
|
|||
those pathnames would also need to be unique,
|
||||
so that they don't conflict with other pathnames on the target system.
|
||||
.IP *
|
||||
It allows better confinement of containererized processes,
|
||||
It allows better confinement of containerized processes,
|
||||
because it is possible to mount the container's cgroup filesystems such that
|
||||
the container processes can't gain access to ancestor cgroup directories.
|
||||
Consider, for example, the following scenario:
|
||||
|
|
Loading…
Reference in New Issue