feat(profiles): add initial userns rule.

Require apparmor 4 to be enabled.
2023-11-19 11:19:24 +00:00 · 2023-11-19 11:19:24 +00:00 · 88555a12d0
commit 88555a12d0
parent 6dc990ac02
5 changed files with 11 additions and 5 deletions
--- a/apparmor.d/groups/virt/virtiofsd
+++ b/apparmor.d/groups/virt/virtiofsd
@ -10,6 +10,8 @@ include <tunables/global>
 profile virtiofsd @{exec_path} {
  include <abstractions/base>

+  # userns,
+
  capability chown,
  capability dac_override,
  capability dac_read_search,