felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix for calico unable to create network namespace.

Browse source
This commit is contained in:
Jeroen Rijken 2022-07-19 14:34:31 +02:00 • committed by Alex
parent 5565217c91
commit 3e006e3c76
4 changed files with 48 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

6
apparmor.d/groups/virt/cni-loopback
View file

@ -10,9 +10,13 @@ include <tunables/global>
profile cni-loopback @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
network netlink raw,
@{exec_path} mr,
@{run}/netns/ r,
/ r,
@{run}/netns/ r,
@{run}/netns/cni-@{uuid} rw,
@{sys}/kernel/mm/transparent_hugepage/hpage_pmd_size r,