[lxc-users] Apparmor DENIED messages in the logs

[Andrey Repin]

Greetings, Andrey Repin!

> Greetings, All!

> [ 5408.633325] type=1400 audit(1471009220.304:57): apparmor="DENIED"
> operation="mount" info="failed flags match" error=-13
> profile="lxc-container-default" name="/" pid=12887 comm="mount" flags="ro, remount"

> Host: Ubuntu 12.04
> Guests: 12.04 and 14.04
> LXC: 2.0.3

> I'm getting quite a bit of these lines in the logs.
> Is this normal?

> Container configurations are quite trivial, I've even removed all questionable
> binds.

Got a similar failure report in #lxcontainers, and this made me realize one thing.
We both use custom container root, and we both trying to bind mount stuff into
container.
I've tried to tell apparmor to behave, but it seems I've lost my grasp.
Can anyone help out here please?


-- 
With best regards,
Andrey Repin
Monday, August 15, 2016 18:50:19

Sorry for my terrible english...