Re: [lxc-devel] cgroup isolation

2010-08-30 Thread Daniel Lezcano
On 08/27/2010 05:52 PM, Denis Rizaev wrote: Hi folks. I tried to mount cgroup fs in container and was surprised that i can see all cgroups tree. Also i can modify limits for my container and others!! In my opinion container should see only it's own level of cgroup, not whole tree. Is it

[lxc-devel] cgroup isolation

2010-08-27 Thread Denis Rizaev
Hi folks. I tried to mount cgroup fs in container and was surprised that i can see all cgroups tree. Also i can modify limits for my container and others!! In my opinion container should see only it's own level of cgroup, not whole tree. Is it fundamental design flaw, or i missed something?