mirror of
https://github.com/roddhjav/apparmor.d.git
synced 2024-11-15 16:03:51 +01:00
Small fixes
This commit is contained in:
parent
70aa5fdbb2
commit
e9bcd3f820
@ -24,6 +24,7 @@ profile cni-calico @{exec_path} {
|
||||
/var/log/calico/cni/ r,
|
||||
/var/log/calico/cni/cni.log rw,
|
||||
|
||||
@{run}/calico/ rw,
|
||||
@{run}/calico/ipam.lock rwk,
|
||||
|
||||
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,
|
||||
|
@ -98,5 +98,7 @@ profile containerd @{exec_path} flags=(attach_disconnected) {
|
||||
/dev/snd/by-path/ r,
|
||||
/dev/vfio/ r,
|
||||
|
||||
deny / r,
|
||||
|
||||
include if exists <local/containerd>
|
||||
}
|
||||
|
Loading…
Reference in New Issue
Block a user