Skip to content

L
lxc
Commit f91f5244 by Stéphane Graber
Options

Allow sysfs remount by mountall

Signed-off-by: 's avatarStéphane Graber <stgraber@ubuntu.com>
parent 95077473
Showing with 1 addition and 0 deletions
config/apparmor/abstractions/container-base.in
...@@ -87,6 +87,7 @@ ...@@ -87,6 +87,7 @@
deny mount fstype=debugfs -> /var/lib/ureadahead/debugfs/, deny mount fstype=debugfs -> /var/lib/ureadahead/debugfs/,
mount fstype=proc -> /proc/, mount fstype=proc -> /proc/,
mount fstype=sysfs -> /sys/, mount fstype=sysfs -> /sys/,
mount options=(rw, nosuid, nodev, noexec, remount) -> /sys/,
deny /sys/firmware/efi/efivars/** rwklx, deny /sys/firmware/efi/efivars/** rwklx,
deny /sys/kernel/security/** rwklx, deny /sys/kernel/security/** rwklx,
mount options=(move) /sys/fs/cgroup/cgmanager/ -> /sys/fs/cgroup/cgmanager.lower/, mount options=(move) /sys/fs/cgroup/cgmanager/ -> /sys/fs/cgroup/cgmanager.lower/,
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment