~ubuntu-branches/ubuntu/quantal/lxc/quantal-201206191543

« back to all changes in this revision

Viewing changes to debian/lxc.apparmor.in

Merge apparmor profile changes

Show diffs side-by-side

added added

removed removed

Lines of Context:
1
 
#include <tunables/global>
2
 
 
3
 
/usr/bin/lxc-start flags=(attach_disconnected) {
4
 
  network,
5
 
  capability,
6
 
  file,
7
 
 
8
 
  # FIXME: should be: mount /** -> /usr/lib/lxc/root/**
9
 
  # currently blocked by apparmor bug
10
 
  mount -> /usr/lib/@DEB_HOST_MULTIARCH@/lxc/{**,},
11
 
  mount fstype=devpts -> /dev/pts/,
12
 
  mount options=bind /dev/pts/ptmx/ -> /dev/ptmx/,
13
 
  mount fstype=debugfs,
14
 
 
15
 
  # all umounts are under the original root's /mnt, but right now we
16
 
  # can't allow those umounts after pivot_root.  So allow all umounts
17
 
  # right now.  They'll be restricted for the container at least.
18
 
  umount,
19
 
  #umount /mnt/{**,},
20
 
 
21
 
  # FIXME: should be: pivot_root /usr/lib/lxc/@DEB_HOST_MULTIARCH@/root/
22
 
  # requires >= 3.2.0-19
23
 
  pivot_root,
24
 
 
25
 
  change_profile -> lxc-*,
26
 
  change_profile -> unconfined,
27
 
 
28
 
}
29