Skip to content

L
lxc
Commit 2979abc1 by Stéphane Graber
Options

apparmor: Update profiles for current upstream parser

Signed-off-by: 's avatarStéphane Graber <stgraber@ubuntu.com> Acked-by: 's avatarSerge E. Hallyn <serge.hallyn@ubuntu.com>
parent 26d6d1c5
Showing with 15 additions and 0 deletions
config/apparmor/abstractions/container-base
...@@ -2,7 +2,12 @@ ...@@ -2,7 +2,12 @@
capability, capability,
file, file,
umount, umount,
# The following 3 entries are only supported by recent apparmor versions.
# Comment them if the apparmor parser doesn't recognize them.
dbus, dbus,
signal,
ptrace,
# ignore DENIED message on / remount # ignore DENIED message on / remount
deny mount options=(ro, remount) -> /, deny mount options=(ro, remount) -> /,
......
config/apparmor/abstractions/container-base.in
...@@ -2,7 +2,12 @@ ...@@ -2,7 +2,12 @@
capability, capability,
file, file,
umount, umount,
# The following 3 entries are only supported by recent apparmor versions.
# Comment them if the apparmor parser doesn't recognize them.
dbus, dbus,
signal,
ptrace,
# ignore DENIED message on / remount # ignore DENIED message on / remount
deny mount options=(ro, remount) -> /, deny mount options=(ro, remount) -> /,
......
config/apparmor/abstractions/start-container
network, network,
capability, capability,
file, file,
# The following 3 entries are only supported by recent apparmor versions.
# Comment them if the apparmor parser doesn't recognize them.
dbus, dbus,
signal,
ptrace,
# currently blocked by apparmor bug # currently blocked by apparmor bug
mount -> /usr/lib/*/lxc/{**,}, mount -> /usr/lib/*/lxc/{**,},
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment