felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Allow containerd to (u)mount cni devices, and loopback to access them.

Browse source
This commit is contained in:
Jeroen Rijken 2022-07-10 15:10:34 +02:00 • committed by Alex
parent 6c8e50534b
commit 02ad72b024
2 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/groups/virt/cni-loopback
View file

@ -11,6 +11,9 @@ profile cni-loopback @{exec_path} {
include <abstractions/base>
@{exec_path} mr,
@{run}/netns/ r,
@{run}/netns/cni-@{uuid} rw,
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,