← Back to branch summary

~serge-hallyn/ubuntu/quantal/lxc/lxc-fixapi

« back to all changes in this revision

Viewing changes to debian/lxc.apparmor

  • Committer: Package Import Robot
  • Author(s): Serge Hallyn
  • Date: 2012-08-08 18:11:21 UTC
  • Revision ID: package-import@ubuntu.com-20120808181121-dvfay08v7hxmaqc1
Tags: 0.8.0~rc1-4ubuntu23
* fix FTBFS
  - add libseccomp to build-deps
  - add autoreconf to build-deps to regenerate Makefile.in at build time.

Show diffs side-by-side

added added

removed removed

Lines of Context:
debian/lxc.apparmor
1
 
#include <tunables/global>
2
 
 
3
 
/usr/bin/lxc-start flags=(attach_disconnected) {
4
 
  network,
5
 
  capability,
6
 
  file,
7
 
 
8
 
  # FIXME: should be: mount /** -> /usr/lib/lxc/root/**
9
 
  # currently blocked by apparmor bug
10
 
  mount -> /usr/lib/x86_64-linux-gnu/lxc/{**,},
11
 
  mount fstype=devpts -> /dev/pts/,
12
 
  mount options=bind /dev/pts/ptmx/ -> /dev/ptmx/,
13
 
  mount fstype=debugfs,
14
 
 
15
 
  # all umounts are under the original root's /mnt, but right now we
16
 
  # can't allow those umounts after pivot_root.  So allow all umounts
17
 
  # right now.  They'll be restricted for the container at least.
18
 
  umount,
19
 
  #umount /mnt/{**,},
20
 
 
21
 
  # FIXME: should be: pivot_root /usr/lib/lxc/x86_64-linux-gnu/root/
22
 
  # requires >= 3.2.0-19
23
 
  pivot_root,
24
 
 
25
 
  change_profile -> lxc-*,
26
 
  change_profile -> unconfined,
27
 
 
28
 
}
29