198b363fff1de9afcee2f26b9aa847316f589afeSerge Hallyn# Run lxc-generate-aa-rules.py on this file after any modification, to generate

198b363fff1de9afcee2f26b9aa847316f589afeSerge Hallyn# the container-rules file which is appended to container-base.in to create the

198b363fff1de9afcee2f26b9aa847316f589afeSerge Hallyn# final abstractions/container-base.

198b363fff1de9afcee2f26b9aa847316f589afeSerge Hallyn

198b363fff1de9afcee2f26b9aa847316f589afeSerge Hallynblock /sys

198b363fff1de9afcee2f26b9aa847316f589afeSerge Hallynallow /sys/fs/cgroup/**

198b363fff1de9afcee2f26b9aa847316f589afeSerge Hallynallow /sys/devices/virtual/net/**

198b363fff1de9afcee2f26b9aa847316f589afeSerge Hallynallow /sys/class/net/**

94a77f3fd8be2fb87f7d1465521fac3ec4b7e6b5Serge Hallynblock /proc/sys

198b363fff1de9afcee2f26b9aa847316f589afeSerge Hallynallow /proc/sys/kernel/shm*

773bd28258371ad0058ff946c5cf94419920ffddSerge Hallynallow /proc/sys/kernel/sem*

773bd28258371ad0058ff946c5cf94419920ffddSerge Hallynallow /proc/sys/kernel/msg*

94a77f3fd8be2fb87f7d1465521fac3ec4b7e6b5Serge Hallynallow /proc/sys/kernel/hostname

94a77f3fd8be2fb87f7d1465521fac3ec4b7e6b5Serge Hallynallow /proc/sys/kernel/domainname

94a77f3fd8be2fb87f7d1465521fac3ec4b7e6b5Serge Hallynallow /proc/sys/net/**