Skip to content

Instantly share code, notes, and snippets.

@prafiles

prafiles/02-stacked-apparmor.conf

Created March 11, 2023 12:03
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save prafiles/c79310cf8f184a82db0a70f44de9b3ca to your computer and use it in GitHub Desktop.
Save prafiles/c79310cf8f184a82db0a70f44de9b3ca to your computer and use it in GitHub Desktop.
Download ZIP
LXC Configuration to allow privileges inside container
Raw
02-stacked-apparmor.conf
# /usr/share/lxc/config/common.conf.d/02-stacked-apparmor.conf
# Clear this (as the main common.conf fills it with the capabilities below plus mac_admin and mac_override
lxc.cap.drop =
# Drop some harmful capabilities
lxc.cap.drop = sys_time sys_module sys_rawio
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment