A "No New Privileges" has been enabled for the container.

[waydroid.git] / data / configs / config_2

diff --git a/data/configs/config_2 b/data/configs/config_2
index b397c02ee90fda08e21f163c87a09082df986592..6a1aca017a1e8c4e3a348c640c00cd1e5ea58d0d 100644 (file)
--- a/data/configs/config_2
+++ b/data/configs/config_2
@@ -7,6 +7,8 @@ lxc.autodev = 0
 # lxc.autodev.tmpfs.size = 25000000
 lxc.apparmor.profile = unconfined
 
+lxc.no_new_privs = 1
+
 lxc.init.cmd = /init
 
 lxc.mount.auto = cgroup:ro sys:ro proc
@@ -19,6 +21,7 @@ lxc.net.0.hwaddr = 00:16:3e:f9:d3:03
 lxc.net.0.mtu = 1500
 
 lxc.console.path = none
+lxc.pty.max = 10
 
 lxc.include = /var/lib/waydroid/lxc/waydroid/config_nodes