2
0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-30 22:05:27 +00:00

Update how to setup a policy namespace for containers

John Johansen
2019-05-06 08:58:32 +00:00
parent 638fb57758
commit e772e3d1b4

@@ -1,6 +1,6 @@
# Intro
With LSM stacking it is possible to use apparmor in conjunction with another [major LSM](how-to-setup-a-policy-namespace-for-containers#major-lsms-explained). Unfortunately it is not entirely straight forward to do so and because LSM stacking support and support for namespacing an LSM have landed piecemeal there are many complication. This guide endeavours to document what is need to be able to successfully use apparmor with containers in an LSM stacking capable kernel.
With LSM stacking it is possible to use apparmor in conjunction with another [LSM](how-to-setup-a-policy-namespace-for-containers#major-lsms-explained). Unfortunately it is not entirely straight forward to do so and because LSM stacking support and support for namespacing an LSM have landed piecemeal there are many complication. This guide endeavours to document what is need to be able to successfully use apparmor with containers in an LSM stacking capable kernel.