Apparmor: allow hugetlbfs mounts everywhere

Signed-off-by: Jesse Tane <jesse.tane@gmail.com> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

Apparmor: allow hugetlbfs mounts everywhere
3a8c6134 · Jesse Tane · Stéphane Graber · 8c760bbd · 3a8c6134 · 3a8c6134
Commit 3a8c6134 authored Jun 30, 2014 by Jesse Tane Committed by Stéphane Graber Jun 30, 2014
Hide whitespace changes
Inline Side-by-side

Showing with 6 additions and 0 deletions

container-base config/apparmor/abstractions/container-base +3 -0

container-base.in config/apparmor/abstractions/container-base.in +3 -0

No files found.
--- a/config/apparmor/abstractions/container-base
+++ b/config/apparmor/abstractions/container-base
@@ -15,6 +15,9 @@
  # allow tmpfs mounts everywhere
  mount fstype=tmpfs,

+  # allow hugetlbfs mounts everywhere
+  mount fstype=hugetlbfs,
+
  # allow mqueue mounts everywhere
  mount fstype=mqueue,


--- a/config/apparmor/abstractions/container-base.in
+++ b/config/apparmor/abstractions/container-base.in
@@ -15,6 +15,9 @@
  # allow tmpfs mounts everywhere
  mount fstype=tmpfs,

+  # allow hugetlbfs mounts everywhere
+  mount fstype=hugetlbfs,
+
  # allow mqueue mounts everywhere
  mount fstype=mqueue,