mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 16:03:51 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(abs): update bwrap minimal requirments.

Browse Source
This commit is contained in:
Alexandre Pujol 2024-02-28 17:17:51 +00:00
parent 555b5e3c3f
commit 431e93c9df
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
1 changed files with 8 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
apparmor.d/abstractions/bwrap
View File

@ -14,13 +14,16 @@
network netlink raw, network netlink raw,
mount fstype=devpts options=(rw nosuid noexec) devpts -> /newroot/dev/pts/, mount fstype=devpts options=(rw nosuid noexec) devpts -> /newroot/dev/pts/,
mount fstype=proc options=(rw nosuid nodev noexec) proc -> /newroot/@{PROC}/, mount fstype=proc options=(rw nosuid nodev noexec) proc -> /newroot/@{PROC}/,
mount fstype=tmpfs options=(rw nosuid nodev) tmpfs -> /newroot/dev/, mount fstype=tmpfs options=(rw nosuid nodev) tmpfs -> /newroot/dev/,
mount fstype=tmpfs options=(rw nosuid nodev) tmpfs -> /newroot/tmp/, mount fstype=tmpfs options=(rw nosuid nodev) tmpfs -> /newroot/tmp/,
mount fstype=tmpfs options=(rw nosuid nodev) tmpfs -> /tmp/, mount fstype=tmpfs options=(rw nosuid nodev) tmpfs -> /tmp/,
mount options=(ro nosuid nodev noexec remount bind silent relatime) -> /newroot/**/, mount options=(ro nosuid nodev noexec remount bind silent relatime) -> /newroot/**/,
mount options=(ro nosuid nodev noexec remount bind silent) -> /newroot/@{run}/,
mount options=(ro nosuid nodev noexec remount noatime bind silent) -> /newroot/**/,
mount options=(ro nosuid nodev remount bind silent relatime) -> /newroot/**/, mount options=(ro nosuid nodev remount bind silent relatime) -> /newroot/**/,
mount options=(rw nosuid nodev remount bind silent relatime) -> /newroot/**/, mount options=(ro nosuid nodev remount bind silent) -> /newroot/dev/{,**/},
mount options=(ro nosuid nodev remount noatime bind silent) -> /newroot/,
mount options=(rw rbind) /tmp/newroot/ -> /tmp/newroot/, mount options=(rw rbind) /tmp/newroot/ -> /tmp/newroot/,
mount options=(rw rbind) /oldroot/dev/* -> /newroot/dev/*, mount options=(rw rbind) /oldroot/dev/* -> /newroot/dev/*,
mount options=(rw rbind) /oldroot/{,**/} -> /newroot/{,**/}, mount options=(rw rbind) /oldroot/{,**/} -> /newroot/{,**/},