77ccd99c84e9f4689ffa28fc7f0870ab5d4803bdIngo Becker# Do not load this file. Rather, load /etc/apparmor.d/lxc-containers, which

77ccd99c84e9f4689ffa28fc7f0870ab5d4803bdIngo Becker# will source all profiles under /etc/apparmor.d/lxc

ee5342a8882c2fc7631fcffb5497e6597747887cTim Reddehase

24c3603618f013746647e70b799c1d6f19ef59a5henning muellerprofile lxc-container-default-with-nesting flags=(attach_disconnected,mediate_deleted) {

ee5342a8882c2fc7631fcffb5497e6597747887cTim Reddehase #include <abstractions/lxc/container-base>

77ccd99c84e9f4689ffa28fc7f0870ab5d4803bdIngo Becker #include <abstractions/lxc/start-container>

77ccd99c84e9f4689ffa28fc7f0870ab5d4803bdIngo Becker

77ccd99c84e9f4689ffa28fc7f0870ab5d4803bdIngo Becker mount fstype=cgroup -> /sys/fs/cgroup/**,

77ccd99c84e9f4689ffa28fc7f0870ab5d4803bdIngo Becker

77ccd99c84e9f4689ffa28fc7f0870ab5d4803bdIngo Becker mount fstype=proc -> /var/cache/lxc/**,

mount fstype=sysfs -> /var/cache/lxc/**,

mount options=(rw,bind) /var/cache/lxc/**/dev/shm/ -> /var/cache/lxc/**/run/shm/,

}