lxc-default-cgns apparmor profile: allow overlay mounts

Signed-off-by: Serge Hallyn <serge@hallyn.com>
This commit is contained in:
Serge Hallyn 2023-01-09 13:36:45 -06:00
parent 2097da81da
commit 43ad7816d8

View File

@ -10,4 +10,5 @@ profile lxc-container-default-cgns flags=(attach_disconnected,mediate_deleted) {
deny mount fstype=devpts,
mount fstype=cgroup -> /sys/fs/cgroup/**,
mount fstype=cgroup2 -> /sys/fs/cgroup/**,
mount fstype=overlay,
}