libvirt/examples/apparmor/libvirt-lxc

# Last Modified: Fri Feb  7 13:01:36 2014

  #include <abstractions/base>

  # Needed for lxc-enter-namespace
  capability sys_admin,
  capability sys_chroot,

  # Added for lxc-enter-namespace --cmd /bin/bash
  /bin/bash PUx,

  /usr/sbin/cron PUx,
  /usr/lib/systemd/systemd PUx,

  /usr/lib/libsystemd-*.so.* mr,
  /usr/lib/libudev-*.so.* mr,
  /etc/ld.so.cache mr,
LXC driver: generate apparmor profiles for guests use_apparmor() was first designed to be called from withing libvirtd, but libvirt_lxc also uses it. in libvirt_lxc, there is no need to check whether to use apparmor or not: just use it if possible. 2014-03-03 10:26:42 +00:00			`# Last Modified: Fri Feb 7 13:01:36 2014`

			`#include <abstractions/base>`

add support for apparmor in lxc-enter-namespace 2014-03-03 10:26:45 +00:00			`# Needed for lxc-enter-namespace`
			`capability sys_admin,`
			`capability sys_chroot,`

			`# Added for lxc-enter-namespace --cmd /bin/bash`
			`/bin/bash PUx,`

LXC driver: generate apparmor profiles for guests use_apparmor() was first designed to be called from withing libvirtd, but libvirt_lxc also uses it. in libvirt_lxc, there is no need to check whether to use apparmor or not: just use it if possible. 2014-03-03 10:26:42 +00:00			`/usr/sbin/cron PUx,`
			`/usr/lib/systemd/systemd PUx,`

			`/usr/lib/libsystemd-.so. mr,`
			`/usr/lib/libudev-.so. mr,`
			`/etc/ld.so.cache mr,`