From 74ca4efd7dae650037df602a7f167989f25e3624 Mon Sep 17 00:00:00 2001
From: Chad MILLER <chad.miller@canonical.com>
Date: Mon, 12 Oct 2015 12:56:46 -0400
Subject: data/apparmor/abstractions/lightdm_chromium-browser: cgroups support
 for guest sessions. (LP: #1504049, LP: #1464958)

---
 data/apparmor/abstractions/lightdm_chromium-browser | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'data')

diff --git a/data/apparmor/abstractions/lightdm_chromium-browser b/data/apparmor/abstractions/lightdm_chromium-browser
index 99089693..bc5e11a2 100644
--- a/data/apparmor/abstractions/lightdm_chromium-browser
+++ b/data/apparmor/abstractions/lightdm_chromium-browser
@@ -62,6 +62,10 @@
     @{PROC}/[0-9]*/statm r,            # sandbox wants these
     @{PROC}/[0-9]*/task/[0-9]*/stat r, # sandbox wants these
 
+    owner @{PROC}/@{pid}/setgroups w,
+    owner @{PROC}/@{pid}/uid_map w,
+    owner @{PROC}/@{pid}/gid_map w,
+
     /selinux/ r,
 
     /usr/lib/chromium-browser/chromium-browser-sandbox ix,
-- 
cgit v1.2.1