From: Serge Hallyn <serge@hallyn.com>
Date: Mon, 9 Jan 2023 19:36:45 +0000 (-0600)
Subject: lxc-default-cgns apparmor profile: allow overlay mounts
X-Git-Tag: v6.0.0~71^2
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F4253%2Fhead;p=thirdparty%2Flxc.git

lxc-default-cgns apparmor profile: allow overlay mounts

Signed-off-by: Serge Hallyn <serge@hallyn.com>
---

diff --git a/config/apparmor/profiles/lxc-default-cgns b/config/apparmor/profiles/lxc-default-cgns
index f69eb994b..7c131f7b3 100644
--- a/config/apparmor/profiles/lxc-default-cgns
+++ b/config/apparmor/profiles/lxc-default-cgns
@@ -10,4 +10,5 @@ profile lxc-container-default-cgns flags=(attach_disconnected,mediate_deleted) {
   deny mount fstype=devpts,
   mount fstype=cgroup -> /sys/fs/cgroup/**,
   mount fstype=cgroup2 -> /sys/fs/cgroup/**,
+  mount fstype=overlay,
 }