Aleksa Sarai 80c3ed1c0c daemon: switch to 'ensure' workflow for AppArmor profiles ... In certain cases (unattended upgrades), system services can disable loaded AppArmor profiles. However, since /etc being read-only is a supported setup we cannot just write a copy of the profile to /etc/apparmor.d. Instead, dynamically load the docker-default AppArmor profile if a container is started with that profile set. This code will short-cut if the profile is already loaded. Fixes: 2f7596aaef ("apparmor: do not save profile to /etc/apparmor.d") Signed-off-by: Aleksa Sarai <asarai@suse.de> (cherry picked from commit 567ef8e785) Signed-off-by: Victor Vieux <vieux@docker.com>		2016-12-12 16:16:50 -08:00
..
caps
cluster	Fix missing IPAM options in swarm network mode	2016-12-12 13:26:30 -08:00
events	Merge pull request #25800 from vdemeester/25798-fix-event-actions	2016-10-28 05:20:49 +02:00
exec	Move StreamConfig out of runconfig	2016-11-14 14:03:05 -08:00
graphdriver	Swap usage of LazyDLL and LoadDLL to LazySystemDLL.	2016-11-22 18:40:35 -08:00
links
logger	Fix a error of the function 'CopyMessage' in 'daemon/logger/logger.go'	2016-11-30 14:08:05 -08:00
network
apparmor_default.go	daemon: switch to 'ensure' workflow for AppArmor profiles	2016-12-12 16:16:50 -08:00
apparmor_default_unsupported.go	daemon: switch to 'ensure' workflow for AppArmor profiles	2016-12-12 16:16:50 -08:00
archive.go	Fix uneccessary calls to volume.Unmount()	2016-11-10 14:04:08 -05:00
archive_unix.go
archive_windows.go
attach.go
auth.go
bindmount_solaris.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
bindmount_unix.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
cache.go
changes.go	Windows: support docker diff	2016-10-28 11:06:54 -07:00
checkpoint.go	Restrict checkpoint name to prevent directory traversal	2016-11-28 11:17:55 -08:00
cluster.go	add docker network prune	2016-10-25 06:43:54 +00:00
commit.go	Windows: Builder case insensitive env	2016-11-30 14:05:48 -08:00
config.go	Rename Remote API to Engine API	2016-11-22 16:49:58 -08:00
config_common_unix.go	Add expected 3rd party binaries commit ids to info	2016-11-09 07:42:44 -08:00
config_experimental.go
config_solaris.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
config_test.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
config_unix.go	Rename Remote API to Engine API	2016-11-22 16:49:58 -08:00
config_unix_test.go
config_windows.go	Add expected 3rd party binaries commit ids to info	2016-11-09 07:42:44 -08:00
config_windows_test.go
container.go	xFix issue for --hostname when running in "--net=host"	2016-12-09 14:42:16 -08:00
container_operations.go	xFix issue for --hostname when running in "--net=host"	2016-12-09 14:42:16 -08:00
container_operations_solaris.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
container_operations_unix.go	plugins: support for devices	2016-11-22 16:16:33 -08:00
container_operations_windows.go
create.go	xFix issue for --hostname when running in "--net=host"	2016-12-09 14:42:16 -08:00
create_unix.go
create_windows.go	Windows: Revert 27884	2016-11-18 13:36:37 -08:00
daemon.go	daemon: switch to 'ensure' workflow for AppArmor profiles	2016-12-12 16:16:50 -08:00
daemon_experimental.go	move plugins out of experimental	2016-11-10 15:51:32 -08:00
daemon_linux.go
daemon_linux_test.go
daemon_solaris.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
daemon_test.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
daemon_unix.go	daemon: remove not needed unmarshal	2016-11-23 12:27:11 -08:00
daemon_unix_test.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
daemon_unsupported.go
daemon_windows.go	Ensure vmcompute.dll exists during daemon start	2016-11-22 16:15:19 -08:00
debugtrap.go	Reduce spew data dumped	2016-11-18 13:32:26 -08:00
debugtrap_unix.go	Spew debugging	2016-11-03 10:05:11 -07:00
debugtrap_unsupported.go	Spew debugging	2016-11-03 10:05:11 -07:00
debugtrap_windows.go	Spew debugging	2016-11-03 10:05:11 -07:00
delete.go	Rename Remote API to Engine API	2016-11-22 16:49:58 -08:00
delete_test.go
discovery.go
discovery_test.go
disk_usage.go	Add reference filter and deprecated filter param…	2016-11-11 15:34:01 +01:00
errors.go
events.go
events_test.go
exec.go	Rename Remote API to Engine API	2016-11-22 16:49:58 -08:00
exec_linux.go
exec_solaris.go
exec_windows.go	Windows: Plumb through user	2016-11-08 17:41:56 -08:00
export.go
getsize_unix.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
health.go	Use Container.Config.Shell instead of hardcoded…	2016-11-19 23:45:58 -08:00
health_test.go	Fix deadlock on cancelling healthcheck	2016-11-18 13:37:44 -08:00
image.go
image_delete.go	Add basic prometheus support	2016-10-27 10:34:38 -07:00
image_exporter.go
image_history.go	Add basic prometheus support	2016-10-27 10:34:38 -07:00
image_inspect.go
image_pull.go	fix a few golint errors	2016-11-19 23:50:06 -08:00
image_push.go
image_tag.go
images.go	Add reference filter and deprecated filter param…	2016-11-11 15:34:01 +01:00
import.go
info.go	api: types: keep info.SecurityOptions a string slice	2016-11-21 14:45:05 -08:00
info_unix.go	api: types: keep info.SecurityOptions a string slice	2016-11-21 14:45:05 -08:00
info_windows.go	api: types: keep info.SecurityOptions a string slice	2016-11-21 14:45:05 -08:00
inspect.go
inspect_solaris.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
inspect_unix.go
inspect_windows.go
keys.go
keys_unsupported.go
kill.go
links.go	Windows: Factor out sqlite	2016-12-02 13:40:06 -08:00
links_linux.go	Windows: Factor out sqlite	2016-12-02 13:40:06 -08:00
links_linux_test.go	Windows: Factor out sqlite	2016-12-02 13:40:06 -08:00
links_notlinux.go	Windows: Factor out sqlite	2016-12-02 13:40:06 -08:00
list.go	Replace all "Filter" field with "Filters" for consistency	2016-11-01 23:09:30 +08:00
list_unix.go
list_windows.go
logdrivers_linux.go
logdrivers_windows.go	Windows: Enable fluentd logdriver	2016-11-08 19:54:57 -08:00
logs.go
logs_test.go
metrics.go	Add basic prometheus support	2016-10-27 10:34:38 -07:00
monitor.go	Move StreamConfig out of runconfig	2016-11-14 14:03:05 -08:00
monitor_linux.go
monitor_solaris.go
monitor_windows.go
mounts.go
names.go	Restrict checkpoint name to prevent directory traversal	2016-11-28 11:17:55 -08:00
network.go	Fix network attachable option.	2016-11-29 14:06:31 -08:00
oci_linux.go	daemon: switch to 'ensure' workflow for AppArmor profiles	2016-12-12 16:16:50 -08:00
oci_solaris.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
oci_windows.go	Windows: Add cpu count option	2016-11-04 13:38:50 -07:00
pause.go
prune.go	Convert DanglingOnly to Filters for docker image prune	2016-12-07 16:08:18 -08:00
rename.go
resize.go
restart.go	Allow providing a custom storage directory for docker checkpoints	2016-10-28 07:56:05 -04:00
search.go
search_test.go
seccomp_disabled.go
seccomp_linux.go	daemon: add a flag to override the default seccomp profile	2016-11-02 21:41:29 +01:00
seccomp_unsupported.go
secrets.go	do not force target type for secret references	2016-11-21 14:45:39 -08:00
secrets_linux.go	secrets: secret management for swarm	2016-11-09 14:27:43 -05:00
secrets_unsupported.go	secrets: secret management for swarm	2016-11-09 14:27:43 -05:00
selinux_linux.go
selinux_unsupported.go
start.go	fix #29199, reset container if container start failed	2016-12-07 16:16:55 -08:00
start_unix.go	Add functional support for Docker sub commands on Solaris	2016-11-07 09:06:34 -08:00
start_windows.go	Swarm-mode overlay networking support for windows	2016-11-10 09:54:40 -08:00
stats.go	Rename Remote API to Engine API	2016-11-22 16:49:58 -08:00
stats_collector.go
stats_collector_solaris.go
stats_collector_unix.go
stats_collector_windows.go
stats_unix.go
stats_windows.go
stop.go
top_unix.go
top_unix_test.go
top_windows.go
unpause.go
update.go	Remove hostname validation as it seems to break users	2016-12-05 00:40:19 -08:00
update_linux.go
update_solaris.go
update_windows.go
volumes.go	Rename Remote API to Engine API	2016-11-22 16:49:58 -08:00
volumes_unit_test.go
volumes_unix.go	close the file	2016-11-21 13:23:23 -08:00
volumes_windows.go
wait.go
workdir.go	COPY file . after WORKDIR (now always created)	2016-11-28 11:12:45 -08:00