diff --git a/contrib/apparmor/template.go b/contrib/apparmor/template.go index 76fd34811..2d8a9a68d 100644 --- a/contrib/apparmor/template.go +++ b/contrib/apparmor/template.go @@ -55,6 +55,10 @@ profile {{.Name}} flags=(attach_disconnected,mediate_deleted) { umount, # Host (privileged) processes may send signals to container processes. signal (receive) peer=unconfined, + # runc may send signals to container processes. + signal (receive) peer=runc, + # crun may send signals to container processes. + signal (receive) peer=crun, # Manager may send signals to container processes. signal (receive) peer={{.DaemonProfile}}, # Container processes may send signals amongst themselves.