Skip to content

L
lxc
Commit 05352fc9 by Wolfgang Bumiller Committed by Stéphane Graber
Options

AppArmor: add make-rslave to usr.bin.lxc-start

The profile already contains mount options=(rw, make-slave) -> **, Which allows going through all mountpoints with make-slave, so it seems to make sense to also allow the directly recursive variant with "make-rslave". Signed-off-by: 's avatarWolfgang Bumiller <w.bumiller@proxmox.com> Acked-by: 's avatarSerge E. Hallyn <serge.hallyn@ubuntu.com>
parent 549a40b6
Showing with 1 addition and 0 deletions
config/apparmor/abstractions/start-container
...@@ -15,6 +15,7 @@ ...@@ -15,6 +15,7 @@
mount options=bind /dev/pts/ptmx/ -> /dev/ptmx/, mount options=bind /dev/pts/ptmx/ -> /dev/ptmx/,
mount options=bind /dev/pts/** -> /dev/**, mount options=bind /dev/pts/** -> /dev/**,
mount options=(rw, make-slave) -> **, mount options=(rw, make-slave) -> **,
mount options=(rw, make-rslave) -> **,
mount fstype=debugfs, mount fstype=debugfs,
# allow pre-mount hooks to stage mounts under /var/lib/lxc/<container>/ # allow pre-mount hooks to stage mounts under /var/lib/lxc/<container>/
mount -> /var/lib/lxc/{**,}, mount -> /var/lib/lxc/{**,},
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment