Prevent dmesg on LXC node for all containers Print

  • 3

By default on proxmox, the command 'dmesg' gives the global output from the main node. You don't want that for security reasons.
To disable this, do the following:

1. Open the file 'common.seccomp'

nano /usr/share/lxc/config/common.seccomp


2. Add the following to the bottom:

syslog errno 1

 

Save! That's it. Make sure to restart your containers in order for it to have effect.


Was this answer helpful?

« Back