Adding IPv6 to LXC container security

hinhthoi

New Member
Aug 6, 2016
26
0
1
36
I'm able to add IPv6 to a Centos LXC container via GUI, after that i login to the container and check everything works great.

But from within the container, i can manually edit the file /etc/sysconfig/network-scripts/ifcfg-eth0 and modify the IPv6 in that file to another IPv6 address in the same block. After restarting the network, i can ping that new IPv6 address !!!!.

So, it means that any LXC customer can use any IPv6 in the range that is assigned to the node, this is a big problem for me.

So, i'd like to ask if this is a known bug, and how to go around with it?

Thanks!
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!