From 43ad7816d8498eeb22d39c1afe6fff438893b54c Mon Sep 17 00:00:00 2001 From: Serge Hallyn Date: Mon, 9 Jan 2023 13:36:45 -0600 Subject: [PATCH] lxc-default-cgns apparmor profile: allow overlay mounts Signed-off-by: Serge Hallyn --- config/apparmor/profiles/lxc-default-cgns | 1 + 1 file changed, 1 insertion(+) diff --git a/config/apparmor/profiles/lxc-default-cgns b/config/apparmor/profiles/lxc-default-cgns index f69eb994b..7c131f7b3 100644 --- a/config/apparmor/profiles/lxc-default-cgns +++ b/config/apparmor/profiles/lxc-default-cgns @@ -10,4 +10,5 @@ profile lxc-container-default-cgns flags=(attach_disconnected,mediate_deleted) { deny mount fstype=devpts, mount fstype=cgroup -> /sys/fs/cgroup/**, mount fstype=cgroup2 -> /sys/fs/cgroup/**, + mount fstype=overlay, } -- 2.47.2