profiles: apparmor: remove unused fields

ExecPath isn't used by anything, and the signal apparmor rule isn't used
because it refers to a peer that we don't ship.

Signed-off-by: Aleksa Sarai <asarai@suse.de>
This commit is contained in:
Aleksa Sarai 2016-03-20 19:01:49 +11:00
parent f3485bc125
commit 64fb664908
2 changed files with 0 additions and 6 deletions

View File

@ -24,8 +24,6 @@ var (
type profileData struct {
// Name is profile name.
Name string
// ExecPath is the path to the docker binary.
ExecPath string
// Imports defines the apparmor functions to import, before defining the profile.
Imports []string
// InnerImports defines the apparmor functions to import in the profile.

View File

@ -42,9 +42,5 @@ profile {{.Name}} flags=(attach_disconnected,mediate_deleted) {
# suppress ptrace denials when using 'docker ps' or using 'ps' inside a container
ptrace (trace,read) peer=docker-default,
{{end}}
{{if ge .Version 209000}}
# docker daemon confinement requires explict allow rule for signal
signal (receive) set=(kill,term) peer={{.ExecPath}},
{{end}}
}
`