The following pull request was submitted through Github.
It can be accessed and reviewed at: https://github.com/lxc/lxc/pull/3391
This e-mail was sent by the LXC bot, direct replies will not reach the author
unless they happen to be subscribed to this list.
=== Description (from pull-request) ===
Signed-off-by: Stéphane Graber <stgra...@ubuntu.com>
From 863845075d3f77d27c91bd9f47d2f8ddc4867bd5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?St=C3=A9phane=20Graber?= <stgra...@ubuntu.com>
Date: Tue, 21 Apr 2020 13:09:07 -0400
Subject: [PATCH] apparmor: Allow boot_id
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Signed-off-by: Stéphane Graber <stgra...@ubuntu.com>
---
config/apparmor/abstractions/start-container.in | 2 ++
1 file changed, 2 insertions(+)
diff --git a/config/apparmor/abstractions/start-container.in
b/config/apparmor/abstractions/start-container.in
index f2b48235de..9998f1121e 100644
--- a/config/apparmor/abstractions/start-container.in
+++ b/config/apparmor/abstractions/start-container.in
@@ -21,6 +21,8 @@
# allow pre-mount hooks to stage mounts under /var/lib/lxc/<container>/
mount -> /var/lib/lxc/{**,},
+ mount /dev/.lxc-boot-id -> /proc/sys/kernel/random/boot_id,
+
# required for some pre-mount hooks
mount fstype=overlayfs,
mount fstype=aufs,
_______________________________________________
lxc-devel mailing list
lxc-devel@lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-devel
