proxmox-mirrors/mirror_lxc
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_lxc synced 2025-04-28 09:35:22 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Allow fuse mounts in apparmor start-container.

Browse Source 
Unprivledged user should be able to do fuse mounts during start-container.
Specifically this solves the problem for un-priv fuse mounting via
pre-hook.

Signed-off-by: Scott Moser <smoser@brickies.net>
This commit is contained in:
Scott Moser 2023-02-24 16:48:10 -05:00
parent 1a2da75b6e
commit 4ea0b361f1
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
config/apparmor/abstractions/start-container.in
View File

@ -20,6 +20,7 @@
mount options=(rw, make-shared) -> **,
mount options=(rw, make-rshared) -> **,
mount fstype=debugfs,
mount fstype=fuse.*,
# allow pre-mount hooks to stage mounts under /var/lib/lxc/<container>/
mount -> /var/lib/lxc/{**,},