Merge pull request #46729 from thaJeztah/20.10_backport_remove-ibm-jenkins-jobs
[20.10 backport] Remove s390x and ppc64le Jenkins pipelines
diff --git a/oci/defaults.go b/oci/defaults.go
index d593a0e..21e76b9 100644
--- a/oci/defaults.go
+++ b/oci/defaults.go
@@ -105,6 +105,7 @@
"/proc/sched_debug",
"/proc/scsi",
"/sys/firmware",
+ "/sys/devices/virtual/powercap",
},
ReadonlyPaths: []string{
"/proc/bus",
diff --git a/profiles/apparmor/template.go b/profiles/apparmor/template.go
index ed5892a..626e5f6 100644
--- a/profiles/apparmor/template.go
+++ b/profiles/apparmor/template.go
@@ -49,6 +49,7 @@
deny /sys/fs/c[^g]*/** wklx,
deny /sys/fs/cg[^r]*/** wklx,
deny /sys/firmware/** rwklx,
+ deny /sys/devices/virtual/powercap/** rwklx,
deny /sys/kernel/security/** rwklx,
{{if ge .Version 208095}}
