1
0
mirror of https://passt.top/passt synced 2024-07-04 08:52:40 +00:00
passt/contrib
Stefano Brivio 100919ce74 apparmor: Expand scope of @{run}/user access, allow writing PID files too
With Podman's custom networks, pasta will typically need to open the
target network namespace at /run/user/<UID>/containers/networks:
grant access to anything under /run/user/<UID> instead of limiting it
to some subpath.

Note that in this case, Podman will need pasta to write out a PID
file, so we need write access, for similar locations, too.

Reported-by: Jörg Sonnenberger <joerg@bec.de>
Link: https://github.com/containers/buildah/issues/5440
Link: https://bugzilla.suse.com/show_bug.cgi?id=1221840
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
2024-04-05 12:12:26 +02:00
..
apparmor apparmor: Expand scope of @{run}/user access, allow writing PID files too 2024-04-05 12:12:26 +02:00
fedora fedora: Switch license identifier to SPDX 2024-03-18 08:57:47 +01:00
kata-containers Don't abbreviate ip(8) arguments in examples and tests 2022-06-15 09:38:10 +02:00
selinux selinux: Allow pasta to remount procfs 2024-02-16 09:43:12 +01:00