5 commits

Author	SHA1	Message	Date
Sebastiaan van Stijn	9f0b3f5609	bump gotest.tools v3.0.1 for compatibility with Go 1.14 ... full diff: https://github.com/gotestyourself/gotest.tools/compare/v2.3.0...v3.0.1 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2020-02-11 00:06:42 +01:00
Sebastiaan van Stijn	a33cf495f2	daemon: use constants for AppArmor profiles ... Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2019-10-13 19:16:12 +02:00
Sebastiaan van Stijn	07ff4f1de8	goimports: fix imports ... Format the source according to latest goimports. Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com> Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2019-09-18 12:56:54 +02:00
Vincent Demeester	3845728524	Update tests to use gotest.tools 👼 ... Signed-off-by: Vincent Demeester <vincent@sbr.pm>	2018-06-13 09:04:30 +02:00
Sebastiaan van Stijn	8f3308ae10	Fix AppArmor not being applied to Exec processes ... Exec processes do not automatically inherit AppArmor profiles from the container. This patch sets the AppArmor profile for the exec process. Before this change: apparmor_parser -q -r <<EOF #include <tunables/global> profile deny-write flags=(attach_disconnected) { #include <abstractions/base> file, network, deny /tmp/** w, capability, } EOF docker run -dit --security-opt "apparmor=deny-write" --name aa busybox docker exec aa sh -c 'mkdir /tmp/test' (no error) With this change applied: docker exec aa sh -c 'mkdir /tmp/test' mkdir: can't create directory '/tmp/test': Permission denied Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2018-03-02 14:05:36 +01:00