Merge pull request #39121 from goldwynr/master

apparmor: allow readby and tracedby
2019-06-11 18:25:47 +02:00 · 2019-06-11 18:25:47 +02:00 · 9e763de6ad
parent 238f8eaa31 b36455258f
commit 9e763de6ad
1 changed files with 1 additions and 1 deletions
--- a/profiles/apparmor/template.go
+++ b/profiles/apparmor/template.go
@ -44,7 +44,7 @@ profile {{.Name}} flags=(attach_disconnected,mediate_deleted) {

 {{if ge .Version 208095}}
  # suppress ptrace denials when using 'docker ps' or using 'ps' inside a container
-  ptrace (trace,read) peer={{.Name}},
+  ptrace (trace,read,tracedby,readby) peer={{.Name}},
 {{end}}
 }
 `