[lxc-devel] stable-1.0 broken on 14.04

S.Çağlar Onur caglar at 10ur.org
Wed Dec 3 03:02:34 UTC 2014


Hey,

Seems like [1] is causing problems for trusty (I'm using daily stable
builds) as its AppArmor version does not understand "unix" directive

[root at eleksi:~/eleksi(master)] /etc/init.d/apparmor reload
 * Reloading AppArmor profiles

ppArmor parser error for /etc/apparmor.d/lxc-containers in
/etc/apparmor.d/abstractions/lxc/container-base at line 41: syntax
error, unexpected TOK_OPENPAREN, expecting TOK_MODE

Commenting out following helps but not sure whether that's a correct thing to do

 37   # Allow receive via unix sockets from anywhere. Note: if per-container
 38   # profiles are supported, for container isolation this should be
changed to
 39   # something like:
 40   #   unix (receive) peer=(label=unconfined),
 41 #unix (receive),
 42
 43   # Allow all unix in the container
 44 #unix peer=(label=@{profile_name}),

[1] https://github.com/lxc/lxc/commit/d9bae9c84b21642876107f32ba6c51ff3350c372

Best,
-- 
S.Çağlar Onur <caglar at 10ur.org>


More information about the lxc-devel mailing list