AppArmor documentation

2016-08-30 18:42:53 -07:00
parent 8e045bfb05
commit 05b2829c7c
4 changed files with 417 additions and 0 deletions
@@ -0,0 +1,10 @@
+#include <tunables/global>
+
+profile k8s-apparmor-example-deny-write flags=(attach_disconnected) {
+  #include <abstractions/base>
+
+  file,
+
+  # Deny all file writes.
+  deny /** w,
+}