With just the default apparmor profile from above I get these AA violations in dmesg:
[889413.230615] type=1400 audit(1443963008.728:498): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-container-adt" name="/sys/fs/cgroup/" pid=6897 comm="systemd" flags="ro, nosuid, nodev, noexec, remount, strictatime" [889420.643901] type=1400 audit(1443963016.141:499): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-container-adt" name="/" pid=7553 comm="systemd-machine" flags="rw, rslave" [889440.399211] type=1400 audit(1443963035.899:500): apparmor="DENIED" operation="mount" info="failed flags match" error=-13 profile="lxc-container-adt" name="/sys/fs/cgroup/" pid=8165 comm="systemd" flags="ro, nosuid, nodev, noexec, remount, strictatime" -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1502604 Title: autopkgtests fail in LXC testbed To manage notifications about this bug go to: https://bugs.launchpad.net/auto-package-testing/+bug/1502604/+subscriptions -- Ubuntu-server-bugs mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
