Mauras Olivier wrote: > Thanks Jamie, i now better understand how to manage these containers. > So i added an exception like said, then added a new domain "<kernel> > /path/to/container/sbin/init" and set it to learning mode. Made the > container reboot, have activities but the domain doesn't list anything and > in the process view init is still listed as <kernel> /sbin/init > > Do i have to do something else? Reload anything? What exactly have you put in exception policy regarding /sbin/init? Can you post the output of: cat /etc/ccs/exception_policy.conf | grep "/sbin/init" Also, what are the exact domains that are launching /sbin/init (e.g. what domains are doing "file execute /sbin/init")? Kind regards, Jamie
TOMOYO
Fork