From 97f9856db3397fad38b9e73976f66b6dc33e82c0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Graber?= Date: Mon, 15 Feb 2016 20:08:09 -0500 Subject: [PATCH] Allow cgroupfs remount by systemd MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Stéphane Graber --- config/apparmor/abstractions/container-base.in | 1 + 1 file changed, 1 insertion(+) diff --git a/config/apparmor/abstractions/container-base.in b/config/apparmor/abstractions/container-base.in index e8a39ce3b..2a3969b9f 100644 --- a/config/apparmor/abstractions/container-base.in +++ b/config/apparmor/abstractions/container-base.in @@ -92,4 +92,5 @@ deny /sys/kernel/security/** rwklx, mount options=(move) /sys/fs/cgroup/cgmanager/ -> /sys/fs/cgroup/cgmanager.lower/, mount fstype=cgroup -> /sys/fs/cgroup/**, + mount options=(ro, nosuid, nodev, noexec, remount, strictatime) -> /sys/fs/cgroup/,