Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

lxd: Add support for apparmor unconfined profile mode #12713

Merged
merged 3 commits into from
Jan 18, 2024
Merged

lxd: Add support for apparmor unconfined profile mode #12713

merged 3 commits into from
Jan 18, 2024

Commits on Jan 9, 2024

  1. lxd/sys: handle apparmor unconfined profile mode appropriately 

    This should be treated the same as being in the unconfined profile.

Signed-off-by: Alex Murray <alex.murray@canonical.com>
    @alexmurray
    alexmurray committed Jan 9, 2024
    Configuration menu
    Copy the full SHA
    be930d7 View commit details
    Browse the repository at this point in the history

  2. lxd/apparmor: allow confined services to receive required signals 

    Allow dnsmasq to be restarted / killed and remove the peer restriction on the
signal rule for the archive profile to ensure it can be sent by a lxd which is
confined under a profile with the unconfined flag.

Signed-off-by: Alex Murray <alex.murray@canonical.com>
    @alexmurray
    alexmurray committed Jan 9, 2024
    Configuration menu
    Copy the full SHA
    148876f View commit details
    Browse the repository at this point in the history

  3. lxd/sys: add comment clarifying AppArmor unconfined profile mode 

    Signed-off-by: Alex Murray <alex.murray@canonical.com>
    @alexmurray
    alexmurray committed Jan 9, 2024
    Configuration menu
    Copy the full SHA
    e6901cd View commit details
    Browse the repository at this point in the history