roles/infra/files/docker-unconfined

   1 # suggestion from bprodoehl
   2 # https://github.com/docker/docker/issues/5490
   3 # https://github.com/ewindisch/docker/commit/d45be4e65288f2978dfedd4a940f3debe128fd35
   4 include <tunables/global>
   5
   6 profile docker-unconfined flags=(attach_disconnected,mediate_deleted) {
   7   include <abstractions/base>
   8   network,
   9   capability,
  10   file,
  11   umount,
  12   mount,
  13   ptrace,
  14   signal,
  15   dbus,
  16
  17 }
  18
  19 # vim: ft=conf  :
  20