10 lines
430 B
Text
10 lines
430 B
Text
|
# Ubuntu 24.04 restricts unprivileged user namespaces unless the executable
|
||
|
|
# has an AppArmor profile that explicitly allows userns. This profile applies
|
||
|
|
# only to the root-owned Zhulan bwrap copy; that binary is executable only by
|
||
|
|
# root and the zhulan-runtime group.
|
||
|
|
abi <abi/4.0>,
|
||
|
|
include <tunables/global>
|
||
|
|
|
||
|
|
profile zhulan-remote-cell-bwrap /opt/guanghu/zhulan-remote-cell/runtime/zhulan-bwrap flags=(unconfined) {
|
||
|
|
userns,
|
||
|
|
}
|