From: Serge Hallyn <serge.hallyn@ubuntu.com>
Date: Thu, 25 Sep 2014 14:45:53 +0000 (+0000)
Subject: apparmor: silence 'silent' mount denials
X-Git-Tag: lxc-1.1.0.alpha2~8
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=097796ac6ca8e14fab3ac6b0db6984d565f57d5d;p=thirdparty%2Flxc.git

apparmor: silence 'silent' mount denials

newer lxc uses 'silent' when remounting on shutdown.  Silence that denial too

Author: Jamie Strandboge <jamie@canonical.com>
Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>
Acked-by: Stéphane Graber <stgraber@ubuntu.com>
---

diff --git a/config/apparmor/abstractions/container-base.in b/config/apparmor/abstractions/container-base.in
index c82f90038..096d35bfc 100644
--- a/config/apparmor/abstractions/container-base.in
+++ b/config/apparmor/abstractions/container-base.in
@@ -11,6 +11,7 @@
 
   # ignore DENIED message on / remount
   deny mount options=(ro, remount) -> /,
+  deny mount options=(ro, remount, silent) -> /,
 
   # allow tmpfs mounts everywhere
   mount fstype=tmpfs,