mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 16:03:51 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update CNI path, set containerd to attach_disconnected, cleanups.

Browse Source
This commit is contained in:
Jeroen Rijken 2022-07-10 13:36:44 +02:00
parent 9fb43325a3
commit 8a13d71edb
5 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
apparmor.d/groups/virt/calico
View File

@ -6,8 +6,8 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = /{opt/,}{cni/,}bin/calico @{exec_path} = /opt/cni/bin/calico
profile calico @{exec_path} flags=(complain) { profile calico @{exec_path} {
include <abstractions/base> include <abstractions/base>
network inet, network inet,

2
apparmor.d/groups/virt/cni-bandwidth
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = /{opt/,}{cni/,}bin/bandwidth @{exec_path} = /opt/cni/bin/bandwidth
profile bandwidth @{exec_path} { profile bandwidth @{exec_path} {
include <abstractions/base> include <abstractions/base>

2
apparmor.d/groups/virt/cni-loopback
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = /{opt/,}{cni/,}bin/loopback @{exec_path} = /opt/cni/bin/loopback
profile loopback @{exec_path} { profile loopback @{exec_path} {
include <abstractions/base> include <abstractions/base>

2
apparmor.d/groups/virt/cni-portmap
View File

@ -6,7 +6,7 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = /{opt/,}{cni/,}bin/portmap @{exec_path} = /opt/cni/bin/portmap
profile portmap @{exec_path} { profile portmap @{exec_path} {
include <abstractions/base> include <abstractions/base>

2
apparmor.d/groups/virt/containerd
View File

@ -7,7 +7,7 @@ abi <abi/3.0>,
include <tunables/global> include <tunables/global>
@{exec_path} = /{usr/,}bin/containerd @{exec_path} = /{usr/,}bin/containerd
profile containerd @{exec_path} { profile containerd @{exec_path} flags=(attach_disconnected) {
include <abstractions/base> include <abstractions/base>
include <abstractions/ssl_certs> include <abstractions/ssl_certs>
include <abstractions/nameservice-strict> include <abstractions/nameservice-strict>