Re: [apparmor] Apparmor profile: mount/umount issue [ non-root application ]

2021-07-23 Thread Seth Arnold
On Fri, Jul 23, 2021 at 05:07:23PM +0530, Murali Selvaraj wrote: > -> Since we have required CAPs CAP_SYS_ADMIN in the profile and it > applied to the process as well but still observing >that mount and unmount fails [ "must be superuser to mount" and > "must be superuser to unmount" ]. How

[apparmor] Apparmor profile: mount/umount issue [ non-root application ]

2021-07-23 Thread Murali Selvaraj
Hi All, I have created an apparmor profile for the process which does mount/umount based on certain conditions. The process is running as a "non-root" user with limited Linux Capabilities. As per (man 7 capabilities) CAP_SYS_ADMIN is required for mount and unmount operations. While the process