浏览代码

Merge pull request #18239 from jfrazelle/17783-fix-regex

Fix parsing of apparmor pcre syntax
Alexander Morozov 9 年之前
父节点
当前提交
377e1d75f9
共有 1 个文件被更改,包括 1 次插入1 次删除
  1. 1 1
      daemon/execdriver/native/apparmor.go

+ 1 - 1
daemon/execdriver/native/apparmor.go

@@ -40,7 +40,7 @@ profile {{.Name}} flags=(attach_disconnected,mediate_deleted) {
   file,
   umount,
 
-  deny @{PROC}/{*,**^[0-9*],sys/kernel/shm*} wkx,
+  deny @{PROC}/{*,**^[0-9]*,sys/kernel/shm*} wkx,
   deny @{PROC}/sysrq-trigger rwklx,
   deny @{PROC}/mem rwklx,
   deny @{PROC}/kmem rwklx,