whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #30439 from sysnet4admin/patch-4

Browse Source 
Update apparmor.md
This commit is contained in:
Kubernetes Prow Robot
2021-11-11 09:46:08 -08:00
committed by GitHub
parent 0a17c09a37 9ac60ec13d
commit 92e5d41881
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/tutorials/clusters/apparmor.md
+2 -2
View File
@@ -233,7 +233,7 @@ kubectl get events | grep hello-apparmor
We can verify that the container is actually running with that profile by checking its proc attr: We can verify that the container is actually running with that profile by checking its proc attr:
```shell ```shell
kubectl exec hello-apparmor cat /proc/1/attr/current kubectl exec hello-apparmor -- cat /proc/1/attr/current
``` ```
``` ```
k8s-apparmor-example-deny-write (enforce) k8s-apparmor-example-deny-write (enforce)
@@ -242,7 +242,7 @@ k8s-apparmor-example-deny-write (enforce)
Finally, we can see what happens if we try to violate the profile by writing to a file: Finally, we can see what happens if we try to violate the profile by writing to a file:
```shell ```shell
kubectl exec hello-apparmor touch /tmp/test kubectl exec hello-apparmor -- touch /tmp/test
``` ```
``` ```
touch: /tmp/test: Permission denied touch: /tmp/test: Permission denied