4 commits

Author	SHA1	Message	Date
Brian Goff	94c07441c2	buildkit: Apply apparmor profile ... Signed-off-by: Brian Goff <cpuguy83@gmail.com> (cherry picked from commit 611eb6ffb3) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2021-02-02 13:32:24 +01:00
Daniel Nephin	4f0d95fa6e	Add canonical import comment ... Signed-off-by: Daniel Nephin <dnephin@docker.com>	2018-02-05 16:51:57 -05:00
Aleksa Sarai	567ef8e785	daemon: switch to 'ensure' workflow for AppArmor profiles ... In certain cases (unattended upgrades), system services can disable loaded AppArmor profiles. However, since /etc being read-only is a supported setup we cannot just write a copy of the profile to /etc/apparmor.d. Instead, dynamically load the docker-default AppArmor profile if a container is started with that profile set. This code will short-cut if the profile is already loaded. Fixes: 2f7596aaef ("apparmor: do not save profile to /etc/apparmor.d") Signed-off-by: Aleksa Sarai <asarai@suse.de>	2016-12-07 08:47:28 +11:00
Tonis Tiigi	9c4570a958	Replace execdrivers with containerd implementation ... Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com> Signed-off-by: Kenfe-Mickael Laventure <mickael.laventure@gmail.com> Signed-off-by: Anusha Ragunathan <anusha@docker.com>	2016-03-18 13:38:32 -07:00