[lxc-devel] [PATCH 1/2] apparmor: silence 'silent' mount denials
Serge Hallyn
serge.hallyn at ubuntu.com
Thu Sep 25 14:45:53 UTC 2014
newer lxc uses 'silent' when remounting on shutdown. Silence that denial too
Author: Jamie Strandboge <jamie at canonical.com>
Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>
---
config/apparmor/abstractions/container-base.in | 1 +
1 file changed, 1 insertion(+)
diff --git a/config/apparmor/abstractions/container-base.in b/config/apparmor/abstractions/container-base.in
index c82f900..096d35b 100644
--- a/config/apparmor/abstractions/container-base.in
+++ b/config/apparmor/abstractions/container-base.in
@@ -11,6 +11,7 @@
# ignore DENIED message on / remount
deny mount options=(ro, remount) -> /,
+ deny mount options=(ro, remount, silent) -> /,
# allow tmpfs mounts everywhere
mount fstype=tmpfs,
--
2.1.0
More information about the lxc-devel
mailing list