Stefano Brivio e2ad420fa2 apparmor: Allow read-only access to uid_map ...

Starting with commit 770d1a4502dd ("isolation: Initially Keep
CAP_SETFCAP if running as UID 0 in non-init"), the lack of this rule
became more apparent as pasta needs to access uid_map in procfs even
as non-root.

However, both passt and pasta needs this, in case they are started as
root, so add this directly to passt's abstraction (which is sourced
by pasta's profile too).

Fixes: 770d1a4502dd ("isolation: Initially Keep CAP_SETFCAP if running as UID 0 in non-init")
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>

2023-09-07 00:31:35 +02:00

..

apparmor

apparmor: Allow read-only access to uid_map

2023-09-07 00:31:35 +02:00

fedora

fedora: Install pasta as hard link to ensure SELinux file context match

2023-08-18 13:18:34 +02:00

kata-containers

Don't abbreviate ip(8) arguments in examples and tests

2022-06-15 09:38:10 +02:00

selinux

selinux: Fix domain transitions for typical commands pasta might run

2023-08-18 18:47:53 +02:00