diff options
| author | Stefano Brivio <sbrivio@redhat.com> | 2023-09-06 21:46:14 +0200 |
|---|---|---|
| committer | Stefano Brivio <sbrivio@redhat.com> | 2023-09-07 00:31:35 +0200 |
| commit | abf5ef6c22d2e6fce0f0abe398a2c18b70ca6290 (patch) | |
| tree | df5fe92e4a273f76b3a358f26323c03634f788fb /contrib/apparmor/usr.bin.passt | |
| parent | e2ad420fa268533628c32acab35fb66f187cef39 (diff) | |
| download | passt-abf5ef6c22d2e6fce0f0abe398a2c18b70ca6290.tar passt-abf5ef6c22d2e6fce0f0abe398a2c18b70ca6290.tar.gz passt-abf5ef6c22d2e6fce0f0abe398a2c18b70ca6290.tar.bz2 passt-abf5ef6c22d2e6fce0f0abe398a2c18b70ca6290.tar.lz passt-abf5ef6c22d2e6fce0f0abe398a2c18b70ca6290.tar.xz passt-abf5ef6c22d2e6fce0f0abe398a2c18b70ca6290.tar.zst passt-abf5ef6c22d2e6fce0f0abe398a2c18b70ca6290.zip | |
apparmor: Allow pasta to remount /proc, access entries under its own copy
Since commit b0e450aa8500 ("pasta: Detach mount namespace, (re)mount
procfs before spawning command"), we need to explicitly permit mount
of /proc, and access to entries under /proc/PID/net (after remount,
that's what AppArmor sees as path).
Fixes: b0e450aa8500 ("pasta: Detach mount namespace, (re)mount procfs before spawning command")
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
Diffstat (limited to 'contrib/apparmor/usr.bin.passt')
0 files changed, 0 insertions, 0 deletions