[Bug 1221840] podman with pasta (passt) fails with apparmor
https://bugzilla.suse.com/show_bug.cgi?id=1221840 https://bugzilla.suse.com/show_bug.cgi?id=1221840#c8 Stefano Brivio <sbrivio@redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(sbrivio@redhat.co | |m) --- Comment #8 from Stefano Brivio <sbrivio@redhat.com> --- (In reply to Danish Prakash from comment #7)
I tried overriding the symlinks with hardlinks on openSUSE TW[1] but I'm running into the same error. Updated usr.bin.pasta AppArmor profile with the rules shared here additionally, invoking `pasta` gives:
mount /: Permission denied Failed to sandbox process, exiting
I just reproduced this on Debian -- by mistake, the package there correctly creates a hard link, but doesn't install a separate usr.bin.pasta profile, and if I just copy the one we ship upstream, I hit the same problem. Give me a bit to fix that upstream and I'll get back to you.
`passt` also fails with the same error but not before displaying (template) interface details. In the package changes, I've added a profile for pasta, a replica of usr.bin.passt jfyi.
By the way, it shouldn't be a replica, that's the whole point of the hard link, so that different profiles get attached to /usr/bin/pasta and /usr/bin/passt. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com