mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2025-01-30 06:45:10 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Allow containerd signal from k3s

Browse source
This commit is contained in:
Jeroen Rijken 2022-07-21 16:46:01 +02:00 committed by Alex
parent 61eab33cd8
commit 130c562488
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/groups/virt/containerd
View file

@ -36,7 +36,7 @@ profile containerd @{exec_path} flags=(attach_disconnected) {
umount /var/lib/containerd/tmpmounts/containerd-mount[0-9]*/, umount /var/lib/containerd/tmpmounts/containerd-mount[0-9]*/,
umount @{run}/netns/cni-@{uuid}, umount @{run}/netns/cni-@{uuid},
signal (receive) set=term peer=dockerd, signal (receive) set=term peer={dockerd,k3s},
signal (send) set=kill peer=cni-calico, signal (send) set=kill peer=cni-calico,
@{exec_path} mr, @{exec_path} mr,