diff --git a/contrib/apparmor/docker b/contrib/apparmor/docker index 7044545e87..4674ecf6e9 100644 --- a/contrib/apparmor/docker +++ b/contrib/apparmor/docker @@ -23,15 +23,3 @@ profile docker-default flags=(attach_disconnected,mediate_deleted) { deny /sys/firmware/efi/efivars/** rwklx, deny /sys/kernel/security/** rwklx, } - -profile docker-unconfined flags=(attach_disconnected,mediate_deleted) { - #include - - network, - capability, - file, - umount, - mount, - pivot_root, - change_profile -> *, -} diff --git a/daemon/execdriver/native/create.go b/daemon/execdriver/native/create.go index c5e0cdee4a..0f0a6a12dc 100644 --- a/daemon/execdriver/native/create.go +++ b/daemon/execdriver/native/create.go @@ -198,7 +198,7 @@ func (d *driver) setPrivileged(container *configs.Config) (err error) { container.Devices = hostDevices if apparmor.IsEnabled() { - container.AppArmorProfile = "docker-unconfined" + container.AppArmorProfile = "unconfined" } return nil