Debian Patches

Status for lxc/1:6.0.6-1

Patch	Description	Author	Forwarded	Last update
0001-nesting-Extend-mount-permissions-in-apparmor-to-allo.patch	[nesting] Extend mount permissions in apparmor to allow systemd services' restrictions to work These options allow systemd security features to work. In particular cases, it helps with systemd-logind and program like this It's only added in nesting profile as it could pose security risks on privileged containers. mount options=(rw,rbind) -> /run/systemd/mount-rootfs/, mount options=(rw,rbind) -> /run/systemd/mount-rootfs/, mount options=(rw,rbind) -> /run/systemd/unit-root/, mount options=(rw,rbind) -> /run/systemd/unit-root/, mount options=(rw,rshared) -> /, mount options=(rw,nosuid,nodev,noexec) proc -> /run/systemd/unit-root/proc/,	Pierre-Elliott Bécue <peb@debian.org>	no	2022-08-01
0002-lxc.service-Starts-after-remote-fs.target.patch	[lxc.service] Starts after remote-fs.target	Pierre-Elliott Bécue <peb@debian.org>	no	2019-08-05
0003-apparmor-4x-userns.patch	update apparmor profile for userns permission and new abidiff --git a/config/apparmor/abstractions/container-base.in b/config/apparmor/abstractions/container-base.in index 87982fd..eb6b8ee 100644	Mathias Gibbens <gibmat@debian.org>	yes
0004-Add-lxc-net-as-dependency-in-sysvinit-script.patch	Add lxc-net as dependency in sysvinit script Otherwise containers don't start during boot, but come up fine later.	Frost <frost@brightfur.net>	no	2025-12-07