proxmox-mirrors/mirror_lxc
1
0
Fork 0
mirror of https://git.proxmox.com/git/mirror_lxc synced 2025-08-15 03:38:47 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
stable-3.0
mirror_lxc/config/apparmor
History
Markos Chandras 9748d3f1de
apparmor: Allow /usr/lib* paths for mount and pivot_root 
openSUSE Leap 15 is using --libdir=/usr/lib64 when building for
x86_64 so we need to allow this path in the apparmor profiles.

Link: https://bugzilla.opensuse.org/show_bug.cgi?id=1099239
Signed-off-by: Markos Chandras <mchandras@suse.de>
2018-07-24 14:59:42 +02:00
..
abstractions apparmor: Allow /usr/lib* paths for mount and pivot_root 2018-07-24 14:59:42 +02:00
profiles allow cgroup mounting in nesting profile 2016-02-21 20:45:04 -08:00
container-rules apparmor: allow writes to sem* and msg* sysctls 2014-04-29 16:45:16 -05:00
container-rules.base apparmor: allow writes to sem* and msg* sysctls 2014-04-29 16:45:16 -05:00
lxc-containers apparmor: Add profiles 2014-01-16 17:49:23 -05:00
lxc-generate-aa-rules.py Use /usr/bin/env python3 instead of /usr/bin/python3 project-wide 2015-11-10 15:53:33 -05:00
Makefile.am Fix installation of out-of-tree (VPATH) builds 2016-03-25 19:30:49 +06:00
README apparmor: auto-generate the blacklist rules 2014-04-01 13:49:43 -04:00
usr.bin.lxc-start apparmor: Add profiles 2014-01-16 17:49:23 -05:00

README 

The abstractions/container-base file is partially automatically
generated.  The two source files are container-rules.base and
abstractions/container-base.in.  If these file are updated,
then

1. Generate a new container-rules file using

./lxc-generate-aa-rules.py container-rules.base > container-rules

2. Concatenate container-base.in with container-rules using

cat abstractions/container-base.in container-rules > abstractions/container-base