Merge pull request #285 from martinpitt/master

apparmor: Allow slave bind mounts

Merge pull request #285 from martinpitt/master
b1814e1c · hallyn · 04cda6d1 · 7987eddb · b1814e1c
Commit b1814e1c authored Jul 30, 2014 by hallyn
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 0 deletions

start-container config/apparmor/abstractions/start-container +1 -0

No files found.
--- a/config/apparmor/abstractions/start-container
+++ b/config/apparmor/abstractions/start-container
@@ -13,6 +13,7 @@
  mount -> /usr/lib/lxc/{**,},
  mount fstype=devpts -> /dev/pts/,
  mount options=bind /dev/pts/ptmx/ -> /dev/ptmx/,
+  mount options=(rw, slave) -> /,
  mount fstype=debugfs,
  # allow pre-mount hooks to stage mounts under /var/lib/lxc/<container>/
  mount -> /var/lib/lxc/{**,},