pod:
  mandatory_access_control:
    type: apparmor
    ceph-osd-default:
      ceph-osd-default: runtime/default
      ceph-init-dirs: runtime/default
      ceph-log-ownership: runtime/default
      osd-init: runtime/default
      init: runtime/default