Apparmor: allow hugetlbfs mounts everywhere

Signed-off-by: Jesse Tane <jesse.tane@gmail.com>
Acked-by: Stéphane Graber <stgraber@ubuntu.com>

diff --git a/config/apparmor/abstractions/container-base b/config/apparmor/abstractions/container-base
index 71e93487ec4d6099ecdc7c809af7004d23ad2017..d783c955b118fd75b6d910e9ea195af8746511e1 100644 (file)
--- a/config/apparmor/abstractions/container-base
+++ b/config/apparmor/abstractions/container-base
@@ -15,6 +15,9 @@
   # allow tmpfs mounts everywhere
   mount fstype=tmpfs,
 
+  # allow hugetlbfs mounts everywhere
+  mount fstype=hugetlbfs,
+
   # allow mqueue mounts everywhere
   mount fstype=mqueue,
 

diff --git a/config/apparmor/abstractions/container-base.in b/config/apparmor/abstractions/container-base.in
index 17be29734edd4fcca40fd2866a5ebcd990817e1b..c82f90038556f138ba34676a99d331d81b780aa5 100644 (file)
--- a/config/apparmor/abstractions/container-base.in
+++ b/config/apparmor/abstractions/container-base.in
@@ -15,6 +15,9 @@
   # allow tmpfs mounts everywhere
   mount fstype=tmpfs,
 
+  # allow hugetlbfs mounts everywhere
+  mount fstype=hugetlbfs,
+
   # allow mqueue mounts everywhere
   mount fstype=mqueue,