aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/apparmor/apparmor.d/slirp4netns
diff options
context:
space:
mode:
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/slirp4netns')
-rw-r--r--straper/db/public/apparmor/apparmor.d/slirp4netns16
1 files changed, 0 insertions, 16 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/slirp4netns b/straper/db/public/apparmor/apparmor.d/slirp4netns
deleted file mode 100644
index 014819e..0000000
--- a/straper/db/public/apparmor/apparmor.d/slirp4netns
+++ /dev/null
@@ -1,16 +0,0 @@
-# This profile allows everything and only exists to give the
-# application a name instead of having the label "unconfined"
-
-abi <abi/4.0>,
-include <tunables/global>
-
-profile slirp4netns /usr/bin/slirp4netns flags=(unconfined) {
- userns,
-
- # pivot_root is required for running `slirp4netns --enable-sandbox` inside LXD.
- # https://github.com/rootless-containers/slirp4netns/issues/348
- pivot_root,
-
- # Site-specific additions and overrides. See local/README for details.
- include if exists <local/slirp4netns>
-}