Skip to content

L
lxc
Commit 81db4189 by Christian Brauner
Options

Merge pull request #794 from Blub/next

apparmor: allow binding /run/{,lock/} -> /var/run/{,lock/}
parents f1ed87e1 4a491a31
Showing with 4 additions and 0 deletions
config/apparmor/abstractions/container-base.in
......@@ -62,6 +62,10 @@
# allow bind mount of /lib/init/fstab for lxcguest
mount options=(rw, bind) /lib/init/fstab.lxc/ -> /lib/init/fstab/,
# allow bind mounts of /run/{,lock} to /var/run/{,lock}
mount options=(rw, bind) /run/ -> /var/run/,
mount options=(rw, bind) /run/lock/ -> /var/lock/,
# deny writes in /proc/sys/fs but allow binfmt_misc to be mounted
mount fstype=binfmt_misc -> /proc/sys/fs/binfmt_misc/,
deny @{PROC}/sys/fs/** wklx,
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment