Add docker-apparmor.sh

acidanthera · Nov 20, 2024 · 1d4a1db · 1d4a1db
1 parent 7f2ce06
commit 1d4a1db
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/docker-apparmor.sh b/docker-apparmor.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+#
+# REF: https://github.com/docker/docs/pull/19638/files
+#
+
+$ cat <<EOF > /etc/apparmor.d/$(echo $HOME/bin/rootlesskit | sed -e s@^/@@ -e s@/@.@g)
+abi <abi/4.0>,
+include <tunables/global>
+
+$HOME/bin/rootlesskit flags=(unconfined) {
+userns,
+
+include if exists <local/$(echo $HOME/bin/rootlesskit | sed -e s@^/@@ -e s@/@.@g)>
+}
+EOF
+
+$ systemctl restart apparmor.service