# This profile allows everything and only exists to give the
# application a name instead of having the label "unconfined"
abi <abi/4.0>,
include <tunables/global>
profile lxc-create /usr/bin/lxc-create flags=(unconfined) {
userns,
# Site-specific additions and overrides. See local/README for details.
include if exists <local/lxc-create>
}