From: Jesse Tane <jesse.tane@gmail.com>
Date: Mon, 30 Jun 2014 19:37:52 +0000 (-0400)
Subject: Apparmor: allow hugetlbfs mounts everywhere
X-Git-Tag: lxc-1.1.0.alpha1~13
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f2f545857cd6b06689bb1220d66d3577f802dbbc;p=thirdparty%2Flxc.git

Apparmor: allow hugetlbfs mounts everywhere

Signed-off-by: Jesse Tane <jesse.tane@gmail.com>
Acked-by: Stéphane Graber <stgraber@ubuntu.com>
---

diff --git a/config/apparmor/abstractions/container-base b/config/apparmor/abstractions/container-base
index 71e93487e..d783c955b 100644
--- a/config/apparmor/abstractions/container-base
+++ b/config/apparmor/abstractions/container-base
@@ -15,6 +15,9 @@
   # allow tmpfs mounts everywhere
   mount fstype=tmpfs,
 
+  # allow hugetlbfs mounts everywhere
+  mount fstype=hugetlbfs,
+
   # allow mqueue mounts everywhere
   mount fstype=mqueue,
 
diff --git a/config/apparmor/abstractions/container-base.in b/config/apparmor/abstractions/container-base.in
index 17be29734..c82f90038 100644
--- a/config/apparmor/abstractions/container-base.in
+++ b/config/apparmor/abstractions/container-base.in
@@ -15,6 +15,9 @@
   # allow tmpfs mounts everywhere
   mount fstype=tmpfs,
 
+  # allow hugetlbfs mounts everywhere
+  mount fstype=hugetlbfs,
+
   # allow mqueue mounts everywhere
   mount fstype=mqueue,