d47847b Azure: Warn about Host's AVC and SECCOMP

2 files Authored by slev 3 years ago, Committed by abbra 3 years ago,
    Azure: Warn about Host's AVC and SECCOMP
    
    Azure's VM distro is Ubuntu, which has enabled AppArmor.
    This security module sometimes interferes with CI Docker containers,
    but to be completely disabled it requires reboot(this is impossible,
    at least for now). So, Azure will warn about AVC records in Host's
    journal as a possible clue.
    
    It will be equally important to be warned about SECCOMP records to
    see possible blocked syscalls(requires SCMP_ACT_LOG as defaultAction in
    seccomp profile).
    
    Signed-off-by: Stanislav Levin <slev@altlinux.org>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>