Paul Holzinger 6cdc9fd51b apparmor: allow netns paths on /tmp ... For some unknown reason "owner" makes it impossible to open bind mounted netns references as apparmor denies it. In the kernel denied log entry we see ouid=0 but it is not clear why that is as the actual file is owned by the real (rootless) user id. In abstractions/pasta there is already `@{run}/user/@{uid}/**` without owner set for the same reason as this path contains the netns path by default when running under Podman. Fixes: 72884484b0 ("apparmor: allow read access on /tmp for pasta") Signed-off-by: Paul Holzinger <pholzing@redhat.com> Signed-off-by: Stefano Brivio <sbrivio@redhat.com>		2024-05-13 23:02:18 +02:00
..
abstractions	apparmor: Fix access to procfs namespace entries in pasta's abstraction	2024-04-05 12:12:26 +02:00
usr.bin.passt	apparmor: Add pasta's own profile	2023-09-07 00:31:35 +02:00
usr.bin.pasta	apparmor: allow netns paths on /tmp	2024-05-13 23:02:18 +02:00