summary |
shortlog |
log |
commit | commitdiff |
tree
raw |
patch |
inline | side by side (from parent 1:
9f48273)
We don't want this container to take down the whole system.
There's probably a better way to do this and controll resources more
globally for the system, i.e. only ever allocate a max amount to all
containers.
DeviceAllow=char-shm rwm
DeviceAllow=char-tty rwm
DeviceAllow=char-usb_device rwm
DeviceAllow=char-shm rwm
DeviceAllow=char-tty rwm
DeviceAllow=char-usb_device rwm