mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
apparmor: docker-default: Include base abstraction
Encountered problems on 14.04 relating to signals between container processes being blocked by apparmor. The base abstraction contains appropriate rules to allow this communication. Docker-DCO-1.1-Signed-off-by: Michael Brown <michael.brown@discourse.org> (github: Supermathie)
This commit is contained in:
parent
a4b4448009
commit
e35c23311f
1 changed files with 1 additions and 0 deletions
|
@ -18,6 +18,7 @@ const DefaultProfile = `
|
||||||
@{PROC}=/proc/
|
@{PROC}=/proc/
|
||||||
|
|
||||||
profile docker-default flags=(attach_disconnected,mediate_deleted) {
|
profile docker-default flags=(attach_disconnected,mediate_deleted) {
|
||||||
|
#include <abstractions/base>
|
||||||
network,
|
network,
|
||||||
capability,
|
capability,
|
||||||
file,
|
file,
|
||||||
|
|
Loading…
Reference in a new issue