Skip to content

Instantly share code, notes, and snippets.

@lucj

lucj/aa-example

Created August 24, 2016 08:15
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save lucj/d7fb8ed1952298f47e5eb070815e85a3 to your computer and use it in GitHub Desktop.
Save lucj/d7fb8ed1952298f47e5eb070815e85a3 to your computer and use it in GitHub Desktop.
Download ZIP
AppArmor example
Raw
aa-example
# check if access to the file is authorized within the container confined in docker-default AppArmor profile
root@4008beda0927:~# cat /proc/sysrq-trigger
cat: /proc/sysrq-trigger: Permission denied
root@4008beda0927:~#
# check if access to the file is authorized within the unconfined container
root@9f2173cfd7bc:~# cat /proc/sysrq-trigger
cat: /proc/sysrq-trigger: Input/output error
root@9f2173cfd7bc:~#
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment