Parcourir la source

profiles: apparmor: remove unused fields

ExecPath isn't used by anything, and the signal apparmor rule isn't used
because it refers to a peer that we don't ship.

Signed-off-by: Aleksa Sarai <asarai@suse.de>
Aleksa Sarai il y a 9 ans
Parent
commit
64fb664908
2 fichiers modifiés avec 0 ajouts et 6 suppressions
  1. 0 2
      profiles/apparmor/apparmor.go
  2. 0 4
      profiles/apparmor/template.go

+ 0 - 2
profiles/apparmor/apparmor.go

@@ -24,8 +24,6 @@ var (
 type profileData struct {
 	// Name is profile name.
 	Name string
-	// ExecPath is the path to the docker binary.
-	ExecPath string
 	// Imports defines the apparmor functions to import, before defining the profile.
 	Imports []string
 	// InnerImports defines the apparmor functions to import in the profile.

+ 0 - 4
profiles/apparmor/template.go

@@ -42,9 +42,5 @@ profile {{.Name}} flags=(attach_disconnected,mediate_deleted) {
   # suppress ptrace denials when using 'docker ps' or using 'ps' inside a container
   ptrace (trace,read) peer=docker-default,
 {{end}}
-{{if ge .Version 209000}}
-  # docker daemon confinement requires explict allow rule for signal
-  signal (receive) set=(kill,term) peer={{.ExecPath}},
-{{end}}
 }
 `