mirror_lxc

mirror of https://git.proxmox.com/git/mirror_lxc synced 2025-08-06 10:13:10 +00:00

History

Serge Hallyn 097796ac6c apparmor: silence 'silent' mount denials newer lxc uses 'silent' when remounting on shutdown. Silence that denial too Author: Jamie Strandboge <jamie@canonical.com> Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com> Acked-by: Stéphane Graber <stgraber@ubuntu.com>		2014-09-25 10:59:26 -04:00
..
abstractions	apparmor: silence 'silent' mount denials	2014-09-25 10:59:26 -04:00
profiles	apparmor: don't allow mounting cgroupfs by default	2014-04-01 13:49:39 -04:00
container-rules	apparmor: allow writes to sem* and msg* sysctls	2014-04-29 16:45:16 -05:00
container-rules.base	apparmor: allow writes to sem* and msg* sysctls	2014-04-29 16:45:16 -05:00
lxc-containers	apparmor: Add profiles	2014-01-16 17:49:23 -05:00
lxc-generate-aa-rules.py	apparmor: deny writes to most of /proc/sys (v2)	2014-04-02 09:54:54 -05:00
Makefile.am	apparmor: auto-generate the blacklist rules	2014-04-01 13:49:43 -04:00
README	apparmor: auto-generate the blacklist rules	2014-04-01 13:49:43 -04:00
usr.bin.lxc-start	apparmor: Add profiles	2014-01-16 17:49:23 -05:00

README

The abstractions/container-base file is partially automatically
generated.  The two source files are container-rules.base and
abstractions/container-base.in.  If these file are updated,
then

1. Generate a new container-rules file using

./lxc-generate-aa-rules.py container-rules.base > container-rules

2. Concatenate container-base.in with container-rules using

cat abstractions/container-base.in container-rules > abstractions/container-base