3 commits

Author	SHA1	Message	Date
Aleksa Sarai	567ef8e785	daemon: switch to 'ensure' workflow for AppArmor profiles ... In certain cases (unattended upgrades), system services can disable loaded AppArmor profiles. However, since /etc being read-only is a supported setup we cannot just write a copy of the profile to /etc/apparmor.d. Instead, dynamically load the docker-default AppArmor profile if a container is started with that profile set. This code will short-cut if the profile is already loaded. Fixes: 2f7596aaef ("apparmor: do not save profile to /etc/apparmor.d") Signed-off-by: Aleksa Sarai <asarai@suse.de>	2016-12-07 08:47:28 +11:00
Aleksa Sarai	e440a57a79	apparmor: switch IsLoaded to return bool ... Signed-off-by: Aleksa Sarai <asarai@suse.de>	2016-12-06 00:10:08 +11:00
Tonis Tiigi	9c4570a958	Replace execdrivers with containerd implementation ... Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com> Signed-off-by: Kenfe-Mickael Laventure <mickael.laventure@gmail.com> Signed-off-by: Anusha Ragunathan <anusha@docker.com>	2016-03-18 13:38:32 -07:00