Merge pull request canonical#13563 from simondeziel/lxc-apparmor-dedup

lxd/apparmor/lxc: remove dup mount options rules
JohnHammell · Jun 7, 2024 · c00387a · c00387a
2 parents 9387ded + 2e55b23
commit c00387a
Showing 1 changed file with 0 additions and 10 deletions.
diff --git a/lxd/apparmor/instance_lxc.go b/lxd/apparmor/instance_lxc.go
@@ -84,16 +84,6 @@ profile "{{ .name }}" flags=(attach_disconnected,mediate_deleted) {
   # Handle tmpfs
   mount fstype=tmpfs,
 
-  # Allow limited modification of mount propagation
-  mount options=(rw,slave) -> /,
-  mount options=(rw,rslave) -> /,
-  mount options=(rw,shared) -> /,
-  mount options=(rw,rshared) -> /,
-  mount options=(rw,private) -> /,
-  mount options=(rw,rprivate) -> /,
-  mount options=(rw,unbindable) -> /,
-  mount options=(rw,runbindable) -> /,
-
   # Allow various ro-bind-*re*-mounts of anything except /proc, /sys and /dev/.lxc
   mount options=(ro,remount,bind) /[^spd]*{,/**},
   mount options=(ro,remount,bind) /d[^e]*{,/**},