slight revision

/sys/kernel/security/apparmor/features/domain/ns_stacked   contains
yes/no if stacked across policy namespace

/sys/kernel/security/apparmor/features/domain/ns_name      contains the
name of the namespace


as long as lxc sets up a detectable namespace ns_name can be used to detect if 
it should load or not, as stacking, and stacking across namespaces will start 
to be used in other ways. So testing for just stack or ns_stack might not be 
enough

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1628285

Title:
  apparmor should be allowed to start in containers

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1628285/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to