Add docker-apparmor.sh

acidanthera · Nov 20, 2024 · a9a9747 · a9a9747
1 parent 5de65ec
commit a9a9747
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/docker-apparmor.sh b/docker-apparmor.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+#
+# REF: https://github.com/docker/docs/pull/19638/files
+# REF: https://stackoverflow.com/a/20293759/795690
+#
+sudo tee -a /etc/apparmor.d/$(echo $HOME/bin/rootlesskit | sed -e s@^/@@ -e s@/@.@g) > /dev/null << EOF
+abi <abi/4.0>,
+include <tunables/global>
+
+$HOME/bin/rootlesskit flags=(unconfined) {
+userns,
+
+include if exists <local/$(echo $HOME/bin/rootlesskit | sed -e s@^/@@ -e s@/@.@g)>
+}
+EOF
+
+sudo systemctl restart apparmor.service