mirror of
git://github.com/lxc/lxc
synced 2025-08-31 20:07:52 +00:00
Add lxc.aa_profile example to all templates
LXC has optional apparmor support, default profile is lxc-container-default. This change adds a commented "lxc.aa_profile = default" line to all templates, uncommenting this will bypass apparmor for the container. Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
This commit is contained in:
@@ -233,6 +233,9 @@ cat <<EOF >> $path/config
|
|||||||
lxc.utsname = $name
|
lxc.utsname = $name
|
||||||
lxc.tty = 1
|
lxc.tty = 1
|
||||||
lxc.pts = 1
|
lxc.pts = 1
|
||||||
|
|
||||||
|
# When using LXC with apparmor, uncomment the next line to run unconfined:
|
||||||
|
#lxc.aa_profile = unconfined
|
||||||
EOF
|
EOF
|
||||||
|
|
||||||
if [ -d "$rootfs/lib" ]; then
|
if [ -d "$rootfs/lib" ]; then
|
||||||
|
Reference in New Issue
Block a user