]> git.proxmox.com Git - lxc.git/commit
apparmor: add rule for allowing remount of boot_id
authorStoiko Ivanov <s.ivanov@proxmox.com>
Wed, 22 Jul 2020 11:05:05 +0000 (13:05 +0200)
committerWolfgang Bumiller <w.bumiller@proxmox.com>
Thu, 30 Jul 2020 13:03:16 +0000 (15:03 +0200)
commit6f24ec6c4facb194a847da95a347fdf851f03995
tree172cebf6116476c42a3589b11b090b53ef4ec322
parent518a4e87d3a859ae52690d97b39241ea130ce1f2
apparmor: add rule for allowing remount of boot_id

commit 863845075d3f77d27c91bd9f47d2f8ddc4867bd5 in upstream only partially
fixes the apparmor deny for mounting boot_id (used for example for identifying
different boots with `journalctl`) inside the container.

Tested by editing the profile and replacing it disregarding the cache:
`apparmor_parser -W -T -r /etc/apparmor.d/usr.bin.lxc-start`

Signed-off-by: Stoiko Ivanov <s.ivanov@proxmox.com>
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
debian/patches/pve/0004-apparmor-Allow-ro-remount-of-boot_id.patch [new file with mode: 0644]
debian/patches/series