Comment 6 for bug 1997374

Revision history for this message
Seth Arnold (seth-arnold) wrote : Re: [Bug 1997374] Re: Profile Entry for operation="change_onexec"

On Tue, Dec 06, 2022 at 07:12:13AM -0000, Shaheena Kazi wrote:
> I am trying to use this command - sudo docker run -it --security-opt=no-new-privileges:true ubuntu bash
> Also, I have tried sudo docker run -it ubuntu bash
>
> (I am using Debian 11 and Kernel - 5.10.113)
>
> And I am getting this denial - Dec 6 06:07:03 microk8s-19 kernel:
> audit: type=1400 audit(1670306823.891:1173): apparmor="ALLOWED"
> operation="exec" info="no new privs" error=-1

The no-new-privileges may be blocking the domain transition. Try without
that?

Thanks