Skip to content

Commit 9e1da42

Browse files
committed
Print out linux lsms. Try disabling apparmor's protction
Signed-off-by: Dom Del Nano <ddelnano@gmail.com>
1 parent 0cab755 commit 9e1da42

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

.github/workflows/build_and_test.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -163,6 +163,8 @@ jobs:
163163
run: |
164164
# Github actions container runner creates a docker network without IPv6 support. We enable it manually.
165165
sysctl -w net.ipv6.conf.lo.disable_ipv6=0
166+
cat /sys/kernel/security/lsm
167+
echo 0 > /proc/sys/kernel/apparmor_restrict_unprivileged_userns
166168
sysctl -w kernel.unprivileged_userns_clone=1
167169
./scripts/bazel_ignore_codes.sh test ${{ matrix.args }} --target_pattern_file=target_files/${{ matrix.tests }} \
168170
2> >(tee bazel_stderr)

0 commit comments

Comments
 (0)