Stefan Berger 60f7222f3f More Rules for AppArmor ...

This patch addresses the following AppArmor complains:

type=AVC msg=audit(1445537397.873:547): apparmor="ALLOWED" operation="mount"
  info="failed srcname match" error=-13 profile="/usr/bin/docker"
  name="/.pivot_root602836504/" pid=11512 comm="exe" flags="rw, rprivate"

type=AVC msg=audit(1445537265.325:502): apparmor="ALLOWED"
  operation="file_lock" profile="/usr/bin/docker"
  name="/var/lib/docker/network/files/local-kv.db" pid=9574 comm="docker"
  requested_mask="k" denied_mask="k" fsuid=0 ouid=0

Signed-off-by: Stefan Berger <stefanb@linux.vnet.ibm.com>
Upstream-commit: 02411987ffc696e867ac202e79c82ac97b3ae69a
Component: engine

2015-11-05 11:06:18 -05:00

..

main.go

change default docker-engine profile to a template based on apparmor_parser version

2015-10-19 16:15:18 -07:00

template.go

More Rules for AppArmor

2015-11-05 11:06:18 -05:00