apparmor: allow shared mounts in start-container.in

Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
This commit is contained in:
Christian Brauner 2022-11-29 20:58:14 +01:00 committed by Christian Brauner (Microsoft)
parent 81d94a4eec
commit 01ae6d4713
No known key found for this signature in database
GPG Key ID: 91C61BC06578DCA2

View File

@ -17,6 +17,8 @@
mount options=bind /dev/pts/** -> /dev/**,
mount options=(rw, make-slave) -> **,
mount options=(rw, make-rslave) -> **,
mount options=(rw, make-shared) -> **,
mount options=(rw, make-rshared) -> **,
mount fstype=debugfs,
# allow pre-mount hooks to stage mounts under /var/lib/lxc/<container>/
mount -> /var/lib/lxc/{**,},