[lxc-devel] [lxc/master] Also allow fstype=fuse for fuse filesystems

[stgraber on Github]

A non-text attachment was scrubbed...
Name: not available
Type: text/x-mailbox
Size: 354 bytes
Desc: not available
URL: <http://lists.linuxcontainers.org/pipermail/lxc-devel/attachments/20160511/cc09304e/attachment.bin>
-------------- next part --------------
From e6faa0670ca7f92b8461c3619141ff67c9f61f31 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?St=C3=A9phane=20Graber?= <stgraber at ubuntu.com>
Date: Wed, 11 May 2016 12:59:23 -0400
Subject: [PATCH] Also allow fstype=fuse for fuse filesystems
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Stéphane Graber <stgraber at ubuntu.com>
---
 config/apparmor/abstractions/container-base    | 1 +
 config/apparmor/abstractions/container-base.in | 1 +
 2 files changed, 2 insertions(+)

diff --git a/config/apparmor/abstractions/container-base b/config/apparmor/abstractions/container-base
index c9f5947..fe24ff3 100644
--- a/config/apparmor/abstractions/container-base
+++ b/config/apparmor/abstractions/container-base
@@ -57,6 +57,7 @@
   mount fstype=mqueue,
 
   # allow fuse mounts everywhere
+  mount fstype=fuse,
   mount fstype=fuse.*,
 
   # allow bind mount of /lib/init/fstab for lxcguest
diff --git a/config/apparmor/abstractions/container-base.in b/config/apparmor/abstractions/container-base.in
index 4cd409d..550625c 100644
--- a/config/apparmor/abstractions/container-base.in
+++ b/config/apparmor/abstractions/container-base.in
@@ -57,6 +57,7 @@
   mount fstype=mqueue,
 
   # allow fuse mounts everywhere
+  mount fstype=fuse,
   mount fstype=fuse.*,
 
   # allow bind mount of /lib/init/fstab for lxcguest