mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
profiles: apparmor: remove unused fields
ExecPath isn't used by anything, and the signal apparmor rule isn't used because it refers to a peer that we don't ship. Signed-off-by: Aleksa Sarai <asarai@suse.de>
This commit is contained in:
parent
f3485bc125
commit
64fb664908
2 changed files with 0 additions and 6 deletions
|
@ -24,8 +24,6 @@ var (
|
|||
type profileData struct {
|
||||
// Name is profile name.
|
||||
Name string
|
||||
// ExecPath is the path to the docker binary.
|
||||
ExecPath string
|
||||
// Imports defines the apparmor functions to import, before defining the profile.
|
||||
Imports []string
|
||||
// InnerImports defines the apparmor functions to import in the profile.
|
||||
|
|
|
@ -42,9 +42,5 @@ profile {{.Name}} flags=(attach_disconnected,mediate_deleted) {
|
|||
# suppress ptrace denials when using 'docker ps' or using 'ps' inside a container
|
||||
ptrace (trace,read) peer=docker-default,
|
||||
{{end}}
|
||||
{{if ge .Version 209000}}
|
||||
# docker daemon confinement requires explict allow rule for signal
|
||||
signal (receive) set=(kill,term) peer={{.ExecPath}},
|
||||
{{end}}
|
||||
}
|
||||
`
|
||||
|
|
Loading…
Reference in a new issue