Add --inaccessible=/sys/module/apparmor

To trick the jail into thinking the apparmor kernel module is not loaded.
2024-01-29 09:01:05 +01:00 · 2024-01-29 09:01:05 +01:00 · 4655f174b7
parent ad95fe7cab
commit 4655f174b7
1 changed files with 1 additions and 0 deletions
--- a/jlmkr.py
+++ b/jlmkr.py
@ -989,6 +989,7 @@ def create_jail(jail_name, distro="debian", release="bookworm"):
            "--quiet",
            "--boot",
            "--bind-ro=/sys/module",
+            "--inaccessible=/sys/module/apparmor",
        ]

        config = cleandoc(