[lxc/lxc] 32f88c: apparmor: use /{,**} instead of /**

0 views
Skip to first unread message

Stéphane Graber

unread,
Jun 5, 2024, 10:53:25 AMJun 5
to lxc-...@lists.linuxcontainers.org
Branch: refs/heads/main
Home: https://github.com/lxc/lxc
Commit: 32f88c8fecaa1f909d0aeb5ff3132932138fe692
https://github.com/lxc/lxc/commit/32f88c8fecaa1f909d0aeb5ff3132932138fe692
Author: Alexander Mikhalitsyn <aleksandr....@canonical.com>
Date: 2024-06-05 (Wed, 05 Jun 2024)

Changed paths:
M config/apparmor/abstractions/container-base.in
M config/apparmor/abstractions/start-container.in
M src/lxc/lsm/apparmor.c

Log Message:
-----------
apparmor: use /{,**} instead of /**

It turned out, that old (and incorrect) rule:
mount options=(rw,make-slave) -> **,

is NOT equivalent to:
mount options=(rw,make-slave) -> /**,

Let's use:
mount options=(rw,make-slave) -> /{,**},

Signed-off-by: Alexander Mikhalitsyn <aleksandr....@canonical.com>


Commit: d29f72e377568204d9849d38d67a19e4476b3f0e
https://github.com/lxc/lxc/commit/d29f72e377568204d9849d38d67a19e4476b3f0e
Author: Alexander Mikhalitsyn <aleksandr....@canonical.com>
Date: 2024-06-05 (Wed, 05 Jun 2024)

Changed paths:
M config/apparmor/abstractions/container-base

Log Message:
-----------
apparmor: regenerate rules

Signed-off-by: Alexander Mikhalitsyn <aleksandr....@canonical.com>


Commit: faedbcb080a154657a0714d1bb4a6324f04fc673
https://github.com/lxc/lxc/commit/faedbcb080a154657a0714d1bb4a6324f04fc673
Author: Stéphane Graber <stgr...@stgraber.org>
Date: 2024-06-05 (Wed, 05 Jun 2024)

Changed paths:
M config/apparmor/abstractions/container-base
M config/apparmor/abstractions/container-base.in
M config/apparmor/abstractions/start-container.in
M src/lxc/lsm/apparmor.c

Log Message:
-----------
Merge pull request #4456 from mihalicyn/apparmor_syntax_fix_fixup

AppArmor fixup


Compare: https://github.com/lxc/lxc/compare/21c941e6e379...faedbcb080a1

To unsubscribe from these emails, change your notification settings at https://github.com/lxc/lxc/settings/notifications
Reply all
Reply to author
Forward
0 new messages