6cdc9fd51b
For some unknown reason "owner" makes it impossible to open bind mounted
netns references as apparmor denies it. In the kernel denied log entry
we see ouid=0 but it is not clear why that is as the actual file is
owned by the real (rootless) user id.
In abstractions/pasta there is already `@{run}/user/@{uid}/**` without
owner set for the same reason as this path contains the netns path by
default when running under Podman.
Fixes:
|
||
|---|---|---|
| .. | ||
| apparmor | ||
| fedora | ||
| kata-containers | ||
| selinux | ||