Merge pull request #39121 from goldwynr/master

thaJeztah · web-flow · commit 9e763de6ad37 · 2019-06-11T18:25:47.000+02:00
apparmor: allow readby and tracedby
diff --git a/profiles/apparmor/template.go b/profiles/apparmor/template.go
@@ -44,7 +44,7 @@ profile {{.Name}} flags=(attach_disconnected,mediate_deleted) {
 
 {{if ge .Version 208095}}
   # suppress ptrace denials when using 'docker ps' or using 'ps' inside a container
-  ptrace (trace,read) peer={{.Name}},
+  ptrace (trace,read,tracedby,readby) peer={{.Name}},
 {{end}}
 }
 `

Original file line number	Diff line number	Diff line change
`@@ -44,7 +44,7 @@ profile {{.Name}} flags=(attach_disconnected,mediate_deleted) {`
`44`	`44`
`45`	`45`	`{{if ge .Version 208095}}`
`46`	`46`	`# suppress ptrace denials when using 'docker ps' or using 'ps' inside a container`
`47`		`- ptrace (trace,read) peer={{.Name}},`
	`47`	`+ ptrace (trace,read,tracedby,readby) peer={{.Name}},`
`48`	`48`	`{{end}}`
`49`	`49`	`}`
`50`	`50`	`