Adding IPv6 to LXC container security

H

hinhthoi

New Member
Aug 6, 2016
26
0
1
37
I'm able to add IPv6 to a Centos LXC container via GUI, after that i login to the container and check everything works great.

But from within the container, i can manually edit the file /etc/sysconfig/network-scripts/ifcfg-eth0 and modify the IPv6 in that file to another IPv6 address in the same block. After restarting the network, i can ping that new IPv6 address !!!!.

So, it means that any LXC customer can use any IPv6 in the range that is assigned to the node, this is a big problem for me.

So, i'd like to ask if this is a known bug, and how to go around with it?

Thanks!
 
You must log in or register to reply here.
Top Bottom