[lxc/lxc] 50dee3: re-add onexec for apparmor, move label assumption ...

[Serge Hallyn]

Branch: refs/heads/main
Home: https://github.com/lxc/lxc
Commit: 50dee37cfe3201ed51f477356f81941c960a5511
https://github.com/lxc/lxc/commit/50dee37cfe3201ed51f477356f81941c960a5511
Author: Ian Merin <Ian....@ncipher.com>
Date: 2025-05-02 (Fri, 02 May 2025)

Changed paths:
M src/lxc/attach.c
M src/lxc/lsm/apparmor.c

Log Message:
-----------
re-add onexec for apparmor, move label assumption until after container has been setup for attach

Signed-off-by: Ian Merin <Ian....@ncipher.com>


Commit: 7b9ee8967b58c99a4d2545758deaf4cf20a62dc0
https://github.com/lxc/lxc/commit/7b9ee8967b58c99a4d2545758deaf4cf20a62dc0
Author: Serge Hallyn <se...@hallyn.com>
Date: 2025-05-02 (Fri, 02 May 2025)

Changed paths:
M src/tests/aa.c

Log Message:
-----------
apparmor test: add an overlay container start

make sure that when we start an overlay container, the
init pid is aa-confined.

Signed-off-by: Serge Hallyn <se...@hallyn.com>


Commit: 947a287507bc2c5dd9d8e7ebd9f39685bf5a443e
https://github.com/lxc/lxc/commit/947a287507bc2c5dd9d8e7ebd9f39685bf5a443e
Author: Serge Hallyn <se...@hallyn.com>
Date: 2025-05-02 (Fri, 02 May 2025)

Changed paths:
M src/lxc/attach.c
M src/lxc/lsm/apparmor.c
M src/tests/aa.c

Log Message:
-----------
Merge pull request #4539 from ianmerin/main

delay assumption of apparmor labels


Compare: https://github.com/lxc/lxc/compare/b294df5d4f50...947a287507bc

To unsubscribe from these emails, change your notification settings at https://github.com/lxc/lxc/settings/notifications