cgmanager: container-base apparmor abstraction: allow mount move

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>
lxc · Feb 3, 2014 · c08a0b7 · c08a0b7
1 parent 16e29c9
commit c08a0b7
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/config/apparmor/abstractions/container-base b/config/apparmor/abstractions/container-base
@@ -48,3 +48,4 @@
   deny /sys/fs/cg[^r]*/** wklx,
   deny /sys/firmware/efi/efivars/** rwklx,
   deny /sys/kernel/security/** rwklx,
+  mount options=(move) /sys/fs/cgroup/cgmanager/ -> /sys/fs/cgroup/cgmanager.lower/,