The following pull request was submitted through Github. It can be accessed and reviewed at: https://github.com/lxc/lxd/pull/6129
This e-mail was sent by the LXC bot, direct replies will not reach the author unless they happen to be subscribed to this list. === Description (from pull-request) === Matches https://github.com/lxc/lxc/pull/3117 Signed-off-by: Stéphane Graber <stgra...@ubuntu.com>
From 1dc64a11dbce98d71289b01a5811347a5b79c45e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Graber?= <stgra...@ubuntu.com> Date: Tue, 27 Aug 2019 13:34:57 -0600 Subject: [PATCH] lxd/apparmor: Prevent writes to /proc/acpi/** MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Matches https://github.com/lxc/lxc/pull/3117 Signed-off-by: Stéphane Graber <stgra...@ubuntu.com> --- lxd/apparmor.go | 1 + 1 file changed, 1 insertion(+) diff --git a/lxd/apparmor.go b/lxd/apparmor.go index f0392de64f..46037ff32f 100644 --- a/lxd/apparmor.go +++ b/lxd/apparmor.go @@ -76,6 +76,7 @@ const AA_PROFILE_BASE = ` deny /proc/bus/** wklx, deny /proc/kcore rwklx, deny /proc/sysrq-trigger rwklx, + deny /proc/acpi/** rwklx, deny /proc/sys/fs/** wklx, # Handle securityfs (access handled separately)
_______________________________________________ lxc-devel mailing list lxc-devel@lists.linuxcontainers.org http://lists.linuxcontainers.org/listinfo/lxc-devel
