feat(profiles): add initial userns rule.

Require apparmor 4 to be enabled.
This commit is contained in:
Alexandre Pujol 2023-11-19 11:19:24 +00:00
parent 6dc990ac02
commit 88555a12d0
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
5 changed files with 11 additions and 5 deletions

View file

@ -10,6 +10,8 @@ include <tunables/global>
profile slirp4netns @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
# userns,
capability net_admin,
capability setpcap,
capability sys_admin,