By default, OpenVZ restricts container access to real physical devices (thus making a container hardware-independent).
By default, OpenVZ confines container access to real physical devices (thus ensuring a container is hardware-independent).