[lxc-users] apparmor inside lxc

László Sári slaszlo.bme at gmail.com
Wed Feb 15 22:23:14 UTC 2017


Hello,

I have lxc container 'foo' created with ubuntu template in: 
/var/lib/lxc/foo/.

I have a file a.out in /var/lib/lxc/foo/rootfs/home/ubuntu/test/ (or 
/home/ubuntu/test/ as visible from inside container).

I would like to use apparmor to prevent a.out from reading/writing 
anything but the files in 'test' folder. Is it possible and if yes, how 
should I configure apparmor/lxc?

aliras
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20170215/a58e2720/attachment.html>


More information about the lxc-users mailing list