mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-06 09:21:00 +01:00
![]() The abstraction lxc/start-container shipped by the liblxc-common
package uses the following mount rule which was not allowed by our
regexes:
mount options=(rw, make-slave) -> **,
mount options=(rw, make-rslave) -> **,
Since in AppArmor regex ** includes '/' but * by itself doesn't, I'm
adding explicit support for **.
Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>
Fixes: https://gitlab.com/apparmor/apparmor/-/issues/381
MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1195
Approved-by: Christian Boltz <apparmor@cboltz.de>
Merged-by: Georgia Garcia <georgia.garcia@canonical.com>
(cherry picked from commit
|
||
---|---|---|
.. | ||
abi | ||
all | ||
bare_include_tests | ||
capability | ||
change_hat | ||
change_profile | ||
conditional | ||
dbus | ||
file | ||
include_tests | ||
includes | ||
includes-preamble | ||
io_uring | ||
mount | ||
mqueue | ||
namespaces | ||
network | ||
profile | ||
ptrace | ||
rewrite | ||
rlimits | ||
signal | ||
unix | ||
vars | ||
xattrs | ||
xtrans | ||
readme |
Directory for auto generated x-transition tests