diff --git a/profiles/apparmor/template.go b/profiles/apparmor/template.go index 7db753de13..cf8c34ce8a 100644 --- a/profiles/apparmor/template.go +++ b/profiles/apparmor/template.go @@ -46,6 +46,7 @@ profile {{.Name}} flags=(attach_disconnected,mediate_deleted) { deny /sys/fs/c[^g]*/** wklx, deny /sys/fs/cg[^r]*/** wklx, deny /sys/firmware/** rwklx, + deny /sys/devices/virtual/powercap/** rwklx, deny /sys/kernel/security/** rwklx, # suppress ptrace denials when using 'docker ps' or using 'ps' inside a container