Skip to content

L
lxc
Unverified Commit ce08b042 by Christian Brauner Committed by GitHub
Options

Merge pull request #2481 from hwoarang/fix-apparmor-paths

apparmor: Allow /usr/lib* paths for mount and pivot_root
parents c77abb20 733e3757
Showing with 6 additions and 6 deletions
config/apparmor/abstractions/start-container
...@@ -9,8 +9,8 @@ ...@@ -9,8 +9,8 @@
ptrace, ptrace,
# currently blocked by apparmor bug # currently blocked by apparmor bug
mount -> /usr/lib/*/lxc/{**,}, mount -> /usr/lib*/*/lxc/{**,},
mount -> /usr/lib/lxc/{**,}, mount -> /usr/lib*/lxc/{**,},
mount fstype=devpts -> /dev/pts/, mount fstype=devpts -> /dev/pts/,
mount options=bind /dev/pts/ptmx/ -> /dev/ptmx/, mount options=bind /dev/pts/ptmx/ -> /dev/ptmx/,
mount options=bind /dev/pts/** -> /dev/**, mount options=bind /dev/pts/** -> /dev/**,
...@@ -34,10 +34,10 @@ ...@@ -34,10 +34,10 @@
# This may look a bit redundant, however it appears we need all of # This may look a bit redundant, however it appears we need all of
# them if we want things to work properly on all combinations of kernel # them if we want things to work properly on all combinations of kernel
# and userspace parser... # and userspace parser...
pivot_root /usr/lib/lxc/, pivot_root /usr/lib*/lxc/,
pivot_root /usr/lib/*/lxc/, pivot_root /usr/lib*/*/lxc/,
pivot_root /usr/lib/lxc/**, pivot_root /usr/lib*/lxc/**,
pivot_root /usr/lib/*/lxc/**, pivot_root /usr/lib*/*/lxc/**,
change_profile -> lxc-*, change_profile -> lxc-*,
change_profile -> unconfined, change_profile -> unconfined,
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment