commit 02d95d3d579e19f478fcaebd7256e54ba349ac05
Author: Barbora Ancincova <bancinco(a)redhat.com>
Date: Sun Aug 10 22:20:39 2014 +0200
Added a section about Secure Linux Containers.
en-US/Secure_Linux_Containers.xml | 17 +++++++++++++++++
en-US/Security_Guide.xml | 4 +++-
2 files changed, 20 insertions(+), 1 deletions(-)
---
diff --git a/en-US/Secure_Linux_Containers.xml b/en-US/Secure_Linux_Containers.xml
new file mode 100644
index 0000000..39a7974
--- /dev/null
+++ b/en-US/Secure_Linux_Containers.xml
@@ -0,0 +1,17 @@
+<?xml version='1.0' encoding='utf-8' ?>
+<!DOCTYPE chapter PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
"http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
+]>
+
+<section id="chap-Security-Enhanced_Linux-Containers">
+ <title>Secure Linux Containers</title>
+
+ <para>
+ Linux Containers (<acronym>LXC</acronym>) is a low-level virtualization
feature that allows you to run multiple copies of the same service at the same time on a
system. Compared to full virtualization, containers do not require an entire new system to
boot, can use less memory, and can use the base operating system in a read-only manner.
For example, LXC allow you to run multiple web servers simultaneously, each with their own
data while sharing the system data, and even running as the root user. However, running a
privileged process within a container could affect other processes running outside of the
container or processes running in other containers. Secure Linux containers use the
SELinux context, therefore preventing the processes running within them from interacting
with each other or with the host.
+ </para>
+ <para>
+ The <application>Docker</application> application is the main
utility for managing Linux Containers in &PRODUCT;. As an alternative, you can also
use the <systemitem>virsh</systemitem> command-line utility provided by the
<package>libvirt</package> package.
+ </para>
+ <para>
+ For further details about Linux Containers see the <ulink
url="http://access.redhat.com/site/documentation/en-US/Red_Hat_Enter...
Management and Linux Containers Guide</ulink> for Red Hat Enterprise Linux.
+ </para>
+</section>
diff --git a/en-US/Security_Guide.xml b/en-US/Security_Guide.xml
index ac27720..c468cba 100644
--- a/en-US/Security_Guide.xml
+++ b/en-US/Security_Guide.xml
@@ -27,8 +27,10 @@
<xi:include href="sepolicy_Suite.xml"
xmlns:xi="http://www.w3.org/2001/XInclude"></xi:include>
<xi:include href="Managing_Users.xml"
xmlns:xi="http://www.w3.org/2001/XInclude"></xi:include>
<xi:include href="SVirt.xml"
xmlns:xi="http://www.w3.org/2001/XInclude"></xi:include>
+ <xi:include href="Secure_Linux_Containers.xml"
xmlns:xi="http://www.w3.org/2001/XInclude"></xi:include>
<xi:include href="Troubleshooting.xml"
xmlns:xi="http://www.w3.org/2001/XInclude"></xi:include>
- <xi:include href="Further_Information.xml"
xmlns:xi="http://www.w3.org/2001/XInclude"></xi:include>
+ <xi:include href="Further_Information.xml"
xmlns:xi="http://www.w3.org/2001/XInclude"></xi:include>
+
</chapter>
<xi:include href="Managing_Confined_Services.xml"
xmlns:xi="http://www.w3.org/2001/XInclude"></xi:include>
<xi:include href="Encryption_Standards.xml"
xmlns:xi="http://www.w3.org/2001/XInclude"></xi:include>