# Do not load this file.  Rather, load /etc/apparmor.d/lxc-containers, which
# will source all profiles under /etc/apparmor.d/lxc

profile lxc-container-default-with-nesting flags=(attach_disconnected,mediate_deleted) {
  #include <abstractions/lxc-container-default>
  #include <abstractions/lxc-start-container>

  mount fstype=cgroup -> /sys/fs/cgroup/**,
}
