mirror of
https://github.com/opencontainers/runc.git
synced 2026-07-11 06:03:57 +08:00
Merge pull request #5049 from Supermathie/aa-fix
apparmor: docker-default: Include base abstraction
This commit is contained in:
+2
-5
@@ -11,13 +11,10 @@ import (
|
||||
const DefaultProfilePath = "/etc/apparmor.d/docker"
|
||||
const DefaultProfile = `
|
||||
# AppArmor profile from lxc for containers.
|
||||
@{HOME}=@{HOMEDIRS}/*/ /root/
|
||||
@{HOMEDIRS}=/home/
|
||||
#@{HOMEDIRS}+=
|
||||
@{multiarch}=*-linux-gnu*
|
||||
@{PROC}=/proc/
|
||||
|
||||
#include <tunables/global>
|
||||
profile docker-default flags=(attach_disconnected,mediate_deleted) {
|
||||
#include <abstractions/base>
|
||||
network,
|
||||
capability,
|
||||
file,
|
||||
|
||||
Reference in New Issue
Block a user