Merge pull request #5049 from Supermathie/aa-fix
apparmor: docker-default: Include base abstraction
This commit is contained in:
commit
6d5da8e354
|
@ -11,13 +11,10 @@ import (
|
|||
const DefaultProfilePath = "/etc/apparmor.d/docker"
|
||||
const DefaultProfile = `
|
||||
# AppArmor profile from lxc for containers.
|
||||
@{HOME}=@{HOMEDIRS}/*/ /root/
|
||||
@{HOMEDIRS}=/home/
|
||||
#@{HOMEDIRS}+=
|
||||
@{multiarch}=*-linux-gnu*
|
||||
@{PROC}=/proc/
|
||||
|
||||
#include <tunables/global>
|
||||
profile docker-default flags=(attach_disconnected,mediate_deleted) {
|
||||
#include <abstractions/base>
|
||||
network,
|
||||
capability,
|
||||
file,
|
||||
|
|
Loading…
Reference in New Issue