vbatts/pkg
1
0
Fork 0
Code Pull requests Releases Activity

apparmor: docker-default: Include base abstraction

Browse source 
Encountered problems on 14.04 relating to signals between container
processes being blocked by apparmor. The base abstraction contains
appropriate rules to allow this communication.

Docker-DCO-1.1-Signed-off-by: Michael Brown <michael.brown@discourse.org> (github: Supermathie)
This commit is contained in:
Michael Brown 2014-04-07 02:02:11 -04:00
parent c05f329be8
commit 264a89788c
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
libcontainer/apparmor/setup.go
View file

@ -18,6 +18,7 @@ const DefaultProfile = `
@{PROC}=/proc/ @{PROC}=/proc/
profile docker-default flags=(attach_disconnected,mediate_deleted) { profile docker-default flags=(attach_disconnected,mediate_deleted) {
#include <abstractions/base>
network, network,
capability, capability,
file, file,