Skip to content

L
lxc
Commit 1bca2013 by Serge Hallyn Committed by Stéphane Graber
Options

apparmor: don't allow mounting cgroupfs by default

Leave the line to do it (commented out) as some users may not be using cgmanager, and may in fact still need those mounts. Signed-off-by: 's avatarSerge Hallyn <serge.hallyn@ubuntu.com> Acked-by: 's avatarStéphane Graber <stgraber@ubuntu.com>
parent a0718c49
Showing with 2 additions and 1 deletion
config/apparmor/profiles/lxc-default-with-nesting
......@@ -5,7 +5,8 @@ profile lxc-container-default-with-nesting flags=(attach_disconnected,mediate_de
#include <abstractions/lxc/container-base>
#include <abstractions/lxc/start-container>
mount fstype=cgroup -> /sys/fs/cgroup/**,
# Uncomment the line below if you are not using cgmanager
# mount fstype=cgroup -> /sys/fs/cgroup/**,
mount fstype=proc -> /var/cache/lxc/**,
mount fstype=sysfs -> /var/cache/lxc/**,
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment