forked from pool/docker
14 lines
503 B
Diff
14 lines
503 B
Diff
|
diff --git a/daemon/execdriver/native/apparmor.go b/daemon/execdriver/native/apparmor.go
|
||
|
|
index 3aaba98..06babd3 100644
|
||
|
|
--- a/daemon/execdriver/native/apparmor.go
|
||
|
|
+++ b/daemon/execdriver/native/apparmor.go
|
||
|
|
@@ -40,7 +40,7 @@ profile {{.Name}} flags=(attach_disconnected,mediate_deleted) {
|
||
|
|
file,
|
||
|
|
umount,
|
||
|
|
|
||
|
|
- deny @{PROC}/{*,**^[0-9*],sys/kernel/shm*} wkx,
|
||
|
|
+ deny @{PROC}/{*,**^[0-9]*,sys/kernel/shm*} wkx,
|
||
|
|
deny @{PROC}/sysrq-trigger rwklx,
|
||
|
|
deny @{PROC}/mem rwklx,
|
||
|
|
deny @{PROC}/kmem rwklx,
|