apparmor: Fix slave bind mounts

The permission to make a mount "slave" is spelt "make-slave", not "slave", see https://launchpad.net/bugs/1401619. Also, we need to make all mounts slave, not just the root dir. https://launchpad.net/bugs/1350947

apparmor: Fix slave bind mounts
64b4c7a3 · Martin Pitt · 97a8f74f · 64b4c7a3
Commit 64b4c7a3 authored Jan 08, 2015 by Martin Pitt
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

start-container config/apparmor/abstractions/start-container +1 -1

No files found.
--- a/config/apparmor/abstractions/start-container
+++ b/config/apparmor/abstractions/start-container
@@ -13,7 +13,7 @@
  mount -> /usr/lib/lxc/{**,},
  mount fstype=devpts -> /dev/pts/,
  mount options=bind /dev/pts/ptmx/ -> /dev/ptmx/,
-  mount options=(rw, slave) -> /,
+  mount options=(rw, make-slave) -> **,
  mount fstype=debugfs,
  # allow pre-mount hooks to stage mounts under /var/lib/lxc/<container>/
  mount -> /var/lib/lxc/{**,},