https://bugzilla.suse.com/show_bug.cgi?id=1221840 https://bugzilla.suse.com/show_bug.cgi?id=1221840#c10 --- Comment #10 from Stefano Brivio <sbrivio@redhat.com> --- Created attachment 873969 --> https://bugzilla.suse.com/attachment.cgi?id=873969&action=edit Proposed upstream patch, tested on Debian only With these changes: - remounting / from an empty mountpoint should now be allowed by AppArmor across AppArmor commit d4b0fef10a4a ("parser: fix rule flag generation change_mount type rules") - access to the filesystem-bound network namespace typically used by Podman's custom networks or Buildah (not 'podman run') is now enabled for pasta, as well -- You are receiving this mail because: You are on the CC list for the bug.