kotovalexarian-likes-github/moby--moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
Code Releases Activity
moby--moby/integration-cli
History
Eric Windisch 80d99236c1 Move AppArmor policy to contrib & deb packaging 
The automatic installation of AppArmor policies prevents the
management of custom, site-specific apparmor policies for the
default container profile. Furthermore, this change will allow
a future policy for the engine itself to be written without demanding
the engine be able to arbitrarily create and manage AppArmor policies.

- Add deb package suggests for apparmor.
- Ubuntu postinst use aa-status & fix policy path
- Add the policies to the debian packages.
- Add apparmor tests for writing proc files
Additional restrictions against modifying files in proc
are enforced by AppArmor. Ensure that AppArmor is preventing
access to these files, not simply Docker's configuration of proc.
- Remove /proc/k?mem from AA policy
The path to mem and kmem are in /dev, not /proc
and cannot be restricted successfully through AppArmor.
The device cgroup will need to be sufficient here.
- Load contrib/apparmor during integration tests
Note that this is somewhat dirty because we
cannot restore the host to its original configuration.
However, it should be noted that prior to this patch
series, the Docker daemon itself was loading apparmor
policy from within the tests, so this is no dirtier or
uglier than the status-quo.

Signed-off-by: Eric Windisch <eric@windisch.us>
2015-07-21 11:05:53 -04:00
..
fixtures/https Move https integration tests as unit tests under client 2015-04-23 15:40:46 +00:00
check_test.go Remove timer and use -check.v for tests formatting 2015-06-18 14:22:40 -07:00
docker_api_attach_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_api_containers_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_api_events_test.go Send resp immediately on GET /events 2015-07-02 11:45:24 -04:00
docker_api_exec_resize_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_api_exec_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_api_images_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_api_info_test.go Fixing statusCode checks for sockRequest 2015-04-23 15:35:56 -07:00
docker_api_inspect_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_api_logs_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_api_network_test.go register libnetwork API and UI with docker parent chain 2015-06-18 12:07:58 -07:00
docker_api_resize_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_api_service_test.go attaching services api and UI chain to docker parent 2015-06-19 09:19:09 -07:00
docker_api_stats_test.go Fix Windows CI fail due to GH13866 and patch up tests 2015-07-09 10:09:45 -07:00
docker_api_test.go Error out if client API version is too old 2015-06-18 11:03:07 +02:00
docker_api_version_test.go Fixing statusCode checks for sockRequest 2015-04-23 15:35:56 -07:00
docker_cli_attach_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_cli_attach_unix_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_cli_build_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_cli_build_unix_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_cli_by_digest_test.go Update graph to use vendored distribution client for the v2 codepath 2015-07-16 13:13:47 -04:00
docker_cli_commit_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_cli_config_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_cli_cp_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_cli_create_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_cli_daemon_experimental_test.go Vendoring in libnetwork for native multihost networking 2015-06-22 04:15:41 -07:00
docker_cli_daemon_test.go dockerCmd when possible 2015-07-20 14:55:40 +08:00
docker_cli_diff_test.go dockerCmd when possible 2015-07-20 14:55:40 +08:00
docker_cli_events_test.go dockerCmd when possible 2015-07-20 14:55:40 +08:00
docker_cli_events_unix_test.go Use suite for integration-cli 2015-04-21 10:28:52 -07:00
docker_cli_exec_test.go dockerCmd when possible 2015-07-20 14:55:40 +08:00
docker_cli_exec_unix_test.go dockerCmd when possible 2015-07-20 14:55:40 +08:00
docker_cli_experimental_test.go dockerCmd when possible 2015-07-20 14:55:40 +08:00
docker_cli_export_import_test.go dockerCmd when possible 2015-07-20 14:55:40 +08:00
docker_cli_help_test.go api/client: Allow for multi-line usage help 2015-06-10 16:14:45 -07:00
docker_cli_history_test.go dockerCmd when possible 2015-07-20 14:55:40 +08:00
docker_cli_images_test.go dockerCmd when possible 2015-07-20 14:55:40 +08:00
docker_cli_import_test.go dockerCmd when possible 2015-07-20 14:55:40 +08:00
docker_cli_info_test.go dockerCmd when possible 2015-07-20 14:55:40 +08:00
docker_cli_inspect_test.go dockerCmd when possible 2015-07-20 14:55:40 +08:00
docker_cli_kill_test.go dockerCmd when possible 2015-07-20 14:55:40 +08:00
docker_cli_links_test.go Recfactor: Use dockerCmd when possible in integration-cli tests 2015-07-20 14:44:22 +08:00
docker_cli_links_unix_test.go Recfactor: Use dockerCmd when possible in integration-cli tests 2015-07-20 14:44:22 +08:00
docker_cli_login_test.go Use suite for integration-cli 2015-04-21 10:28:52 -07:00
docker_cli_logs_test.go Recfactor: Use dockerCmd when possible in integration-cli tests 2015-07-20 14:44:22 +08:00
docker_cli_nat_test.go Recfactor: Use dockerCmd when possible in integration-cli tests 2015-07-20 14:44:22 +08:00
docker_cli_network_test.go Recfactor: Use dockerCmd when possible in integration-cli tests 2015-07-20 14:44:22 +08:00
docker_cli_pause_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_cli_port_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_cli_port_unix_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_cli_proxy_test.go Implement daemon suite for integration-cli 2015-04-27 15:48:29 -07:00
docker_cli_ps_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_cli_pull_test.go Update graph to use vendored distribution client for the v2 codepath 2015-07-16 13:13:47 -04:00
docker_cli_push_test.go Use dockerCmd when possible (#14603) 2015-07-14 21:52:43 +02:00
docker_cli_rename_test.go Refactor : Use dockerCmd in integration-cli tests 2015-07-17 04:07:12 +08:00
docker_cli_restart_test.go Refactor : Use dockerCmd in integration-cli tests 2015-07-17 04:07:12 +08:00
docker_cli_rm_test.go Refactor : Use dockerCmd in integration-cli tests 2015-07-17 04:07:12 +08:00
docker_cli_rmi_test.go Merge pull request #14578 from mountkin/fix-rmi-image-not-found 2015-07-16 18:02:51 -07:00
docker_cli_run_test.go Move AppArmor policy to contrib & deb packaging 2015-07-21 11:05:53 -04:00
docker_cli_run_unix_test.go Refactor : Use dockerCmd in integration-cli tests 2015-07-17 04:07:12 +08:00
docker_cli_save_load_test.go Cleanup not needed calls to deleteImages 2015-07-13 20:30:53 +02:00
docker_cli_save_load_unix_test.go Fix kr/pty import path 2015-06-04 09:02:14 -07:00
docker_cli_search_test.go api/client: Allow for multi-line usage help 2015-06-10 16:14:45 -07:00
docker_cli_service_test.go Support for --publish-service flag in docker run 2015-06-20 11:03:38 -07:00
docker_cli_start_test.go Volumes refactor and external plugin implementation. 2015-05-21 20:34:17 -07:00
docker_cli_start_volume_driver_unix_test.go Separate plugin sockets and specs. 2015-07-16 14:20:07 -07:00
docker_cli_stats_test.go Recfactor: Use dockerCmd when possible in integration-cli tests 2015-07-20 14:44:22 +08:00
docker_cli_tag_test.go Recfactor: Use dockerCmd when possible in integration-cli tests 2015-07-20 14:44:22 +08:00
docker_cli_top_test.go Recfactor: Use dockerCmd when possible in integration-cli tests 2015-07-20 14:44:22 +08:00
docker_cli_version_test.go Recfactor: Use dockerCmd when possible in integration-cli tests 2015-07-20 14:44:22 +08:00
docker_cli_wait_test.go Recfactor: Use dockerCmd when possible in integration-cli tests 2015-07-20 14:44:22 +08:00
docker_test_vars.go Volumes refactor and external plugin implementation. 2015-05-21 20:34:17 -07:00
docker_test_vars_cli.go integration-cli: add mechanism to skip tests 2015-02-17 00:43:41 -08:00
docker_test_vars_daemon.go integration-cli: add mechanism to skip tests 2015-02-17 00:43:41 -08:00
docker_utils.go Add dockerCmdWithStdoutStderr function 2015-07-18 10:48:28 +08:00
registry.go Use suite for integration-cli 2015-04-21 10:28:52 -07:00
requirements.go Fix Windows CI fail due to GH13866 and patch up tests 2015-07-09 10:09:45 -07:00
requirements_unix.go Update libcontainer 2015-07-16 16:02:26 -07:00
test_vars_exec.go integration-cli: add test requirement ExecSupport 2015-02-20 23:24:30 -08:00
test_vars_noexec.go integration-cli: add test requirement ExecSupport 2015-02-20 23:24:30 -08:00
test_vars_unix.go pkg/archive: adjust chmod bits on windows 2015-03-04 14:10:37 -08:00
test_vars_windows.go Change windows default permissions to 755 not 711, read access for all poses little security risk and prevents breaking existing Dockerfiles 2015-03-20 21:54:33 -07:00
utils.go Merge pull request #13499 from cpuguy83/fix_stats_unsubscribe 2015-05-27 11:10:36 -04:00