]> git.ipfire.org Git - thirdparty/lxc.git/commit
Apparmor: use lxc-default-cgns if cgns is enabled
authorSerge Hallyn <serge.hallyn@ubuntu.com>
Sun, 21 Feb 2016 23:51:37 +0000 (15:51 -0800)
committerSerge Hallyn <serge.hallyn@ubuntu.com>
Mon, 22 Feb 2016 04:45:04 +0000 (20:45 -0800)
commit603fd08406d10d924f7bb9ed57cb09ed237115db
tree9309902d5b5cd4543513a5327f1eb5596195662c
parentdc76ac7ab5295b8ad40ac57c51e03da4dbd28479
Apparmor: use lxc-default-cgns if cgns is enabled

Because containers need to - and safely can - mount cgroufs in that
case.

Note that if cgns is enabled but the unshare fails, we fail the container
start, so checking whether they are enabled is enough.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>
src/lxc/lsm/apparmor.c