{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/16911","labels_url":"https://api.github.com/repos/docker/docker/issues/16911/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/16911/comments","events_url":"https://api.github.com/repos/docker/docker/issues/16911/events","html_url":"https://github.com/docker/docker/pull/16911","id":110824766,"number":16911,"title":"Trying to find rule for AppArmor DENIED error related to mount/pivot_r…","user":{"login":"stefanberger","id":1873348,"avatar_url":"https://avatars.githubusercontent.com/u/1873348?v=3","gravatar_id":"","url":"https://api.github.com/users/stefanberger","html_url":"https://github.com/stefanberger","followers_url":"https://api.github.com/users/stefanberger/followers","following_url":"https://api.github.com/users/stefanberger/following{/other_user}","gists_url":"https://api.github.com/users/stefanberger/gists{/gist_id}","starred_url":"https://api.github.com/users/stefanberger/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stefanberger/subscriptions","organizations_url":"https://api.github.com/users/stefanberger/orgs","repos_url":"https://api.github.com/users/stefanberger/repos","events_url":"https://api.github.com/users/stefanberger/events{/privacy}","received_events_url":"https://api.github.com/users/stefanberger/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/docker/docker/labels/area/security/apparmor","name":"area/security/apparmor","color":"fbca04"},{"url":"https://api.github.com/repos/docker/docker/labels/status/2-code-review","name":"status/2-code-review","color":"fad8c7"}],"state":"closed","locked":false,"assignee":{"login":"jfrazelle","id":1445228,"avatar_url":"https://avatars.githubusercontent.com/u/1445228?v=3","gravatar_id":"","url":"https://api.github.com/users/jfrazelle","html_url":"https://github.com/jfrazelle","followers_url":"https://api.github.com/users/jfrazelle/followers","following_url":"https://api.github.com/users/jfrazelle/following{/other_user}","gists_url":"https://api.github.com/users/jfrazelle/gists{/gist_id}","starred_url":"https://api.github.com/users/jfrazelle/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jfrazelle/subscriptions","organizations_url":"https://api.github.com/users/jfrazelle/orgs","repos_url":"https://api.github.com/users/jfrazelle/repos","events_url":"https://api.github.com/users/jfrazelle/events{/privacy}","received_events_url":"https://api.github.com/users/jfrazelle/received_events","type":"User","site_admin":false},"milestone":null,"comments":7,"created_at":"2015-10-11T00:13:43Z","updated_at":"2015-10-22T18:14:05Z","closed_at":"2015-10-22T18:14:05Z","pull_request":{"url":"https://api.github.com/repos/docker/docker/pulls/16911","html_url":"https://github.com/docker/docker/pull/16911","diff_url":"https://github.com/docker/docker/pull/16911.diff","patch_url":"https://github.com/docker/docker/pull/16911.patch"},"body":"…oot op\r\n\r\nThis is the so-far-fruitless-attempt to find an AppArmor rule for the following\r\ndeny:\r\n\r\ntype=AVC msg=audit(1444521663.545:61650): apparmor=\"DENIED\" operation=\"mount\" info=\"failed srcname match\" error=-13 profile=\"/usr/bin/docker\" name=\"/.pivot_root465400889/\" pid=1214931 comm=\"exe\" flags=\"rw, rprivate\"\r\n\r\naa-genprof on my Ubuntu 14.04.2 doesn't help generate the rule, either.\r\n\r\n(apparmor-utils  version 2.8.95~2430-0ubuntu)\r\n\r\nSigned-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>"},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/150310180","html_url":"https://github.com/docker/docker/pull/16911#issuecomment-150310180","issue_url":"https://api.github.com/repos/docker/docker/issues/16911","id":150310180,"user":{"login":"stefanberger","id":1873348,"avatar_url":"https://avatars.githubusercontent.com/u/1873348?v=3","gravatar_id":"","url":"https://api.github.com/users/stefanberger","html_url":"https://github.com/stefanberger","followers_url":"https://api.github.com/users/stefanberger/followers","following_url":"https://api.github.com/users/stefanberger/following{/other_user}","gists_url":"https://api.github.com/users/stefanberger/gists{/gist_id}","starred_url":"https://api.github.com/users/stefanberger/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stefanberger/subscriptions","organizations_url":"https://api.github.com/users/stefanberger/orgs","repos_url":"https://api.github.com/users/stefanberger/repos","events_url":"https://api.github.com/users/stefanberger/events{/privacy}","received_events_url":"https://api.github.com/users/stefanberger/received_events","type":"User","site_admin":false},"created_at":"2015-10-22T18:14:05Z","updated_at":"2015-10-22T18:14:05Z","body":"The lazy rule (no options given) is the one that makes the 2nd error go away:\r\n```\r\nmount -> /.pivot_root[0-9]*/\r\n```"}}