apparmor: docker-default: Include base abstraction
Encountered problems on 14.04 relating to signals between container processes being blocked by apparmor. The base abstraction contains appropriate rules to allow this communication. Docker-DCO-1.1-Signed-off-by: Michael Brown <michael.brown@discourse.org> (github: Supermathie) Upstream-commit: e35c23311fce853fab318527789f11cc8c150ea2 Component: engine
This commit is contained in:
@ -18,6 +18,7 @@ const DefaultProfile = `
|
||||
@{PROC}=/proc/
|
||||
|
||||
profile docker-default flags=(attach_disconnected,mediate_deleted) {
|
||||
#include <abstractions/base>
|
||||
network,
|
||||
capability,
|
||||
file,
|
||||
|
||||
Reference in New Issue
Block a user