1
0
mirror of https://passt.top/passt synced 2024-07-04 08:52:40 +00:00
passt/contrib/apparmor
Stefano Brivio e2ad420fa2 apparmor: Allow read-only access to uid_map
Starting with commit 770d1a4502 ("isolation: Initially Keep
CAP_SETFCAP if running as UID 0 in non-init"), the lack of this rule
became more apparent as pasta needs to access uid_map in procfs even
as non-root.

However, both passt and pasta needs this, in case they are started as
root, so add this directly to passt's abstraction (which is sourced
by pasta's profile too).

Fixes: 770d1a4502 ("isolation: Initially Keep CAP_SETFCAP if running as UID 0 in non-init")
Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
2023-09-07 00:31:35 +02:00
..
abstractions apparmor: Allow read-only access to uid_map 2023-09-07 00:31:35 +02:00
usr.bin.passt passt: Relicense to GPL 2.0, or any later version 2023-04-06 18:00:33 +02:00