39417f76ad
This fixes issues where the apparmor profile is not applied to processes via docker exec. As a side effect the parent processes were unable to kill the additional child processes because of the profile mismatch. Easy way to reproduce on an apparmor system: docker run -ti debian:jessie bash ps auxZ - look at the labels - in another shell docker exec <name> sleep 1000 - go back to the first container and ps auxZ - make sure all processes have the correct docker-default profile Signed-off-by: Michael Crosby <crosbymichael@gmail.com> Upstream-commit: 018ce19b31bbd8d752658835e9442fa7d59a47e3 Component: engine