-
# Description
Add AppArmor support to Kubernetes. Initial support should include the ability to specify an AppArmor profile for a container or pod in the API, and have that profile applied by the c…
-
# Bug report
### What operating system and version are you using?
```
$ osqueryi --line "SELECT version, build, platform FROM os_version;"
version = 24.04 LTS (Noble Numbat)
b…
-
**Describe the bug**
I set up my multipass to use the libvirt backend and was using it successfully until today.
I moved my multipass storage to a different location (following these instructions:…
-
### What happened?
I installed SPO and followed the documentation regarding an example installation of an AppArmor Profile. I am running Kubernetes 1.30.0. If I use the securityContext clause, it h…
-
### Description
Trying to run Chromium results in a AppArmor "DENIED" Message in `dmesg`.
### Steps to Reproduce
Run in BASH `firejail /usr/bin/chromium`.
Result:
```
Reading profile /…
-
See conversation here for details: https://github.com/siderolabs/talos/pull/8641#issuecomment-2074597065
-
The apparmor profile provided in the solution does not work for me:
```
#include
profile network-deny flags=(attach_disconnected) {
#include
network,
}
```
Instead I used this one:
…
-
I had to disable AppArmor for chrony to get this working on Debian 12. Can you please verify and fix if you agree? I may be out of my depth.
Here's what I had to run:
aa-complain /etc/apparmor.d…
-
Ubuntu made some changes in apparmor in 24.04, preventing many apps from working. Such apps include Balena Etcher, Wike (available on official repositories and also flatpak), Foliate ebook reader, and…
-
### Description
apparmor.service being enabled by default in the images causes various issues (e.g. https://gitlab.com/apparmor/apparmor/-/issues/402). Given these are ephemeral build VMs where users…