Ubuntu
casper package

  1. Bug #131976
  2. Comment #41

Comment 41 for bug 131976

Revision history for this message
Steve Beattie (sbeattie) wrote : Re: [Bug 131976] Re: apparmor doesn't work on stacked file system (livecd) -- DHCP/cups/others fail to start

On Wed, Feb 10, 2010 at 03:46:42PM -0000, Nikolaus Rath wrote:
> It still does not work:
>
> [0] matterhorn[ltsp]:~# cat /etc/apparmor.d/tunables/alias
> # https://bugs.launchpad.net/bugs/131976
> alias file
> alias /rofs -> /,
> alias /cow -> /,

Err, the alias mappings should be the other round; i.e.

  alias / -> /rofs,
  alias / -> /cow,

except that you don't want (or can't have) two mappings for the same
path *and* you will be mapping everything under / to it, which may
break if there's anything that's not covered by the stacked file
system. You probably want something more akin to:

  alias /etc -> /rofs/etc,
  alias /lib -> /rofs/lib,
  alias /usr -> /rofs/usr,
  alias /var -> /cow/var,

(continue as needed)

--
Steve Beattie
<email address hidden>
http://NxNW.org/~steve/