moby/daemon/apparmor_default_unsupported.go

// +build !linux

package daemon

func ensureDefaultAppArmorProfile() error {
	return nil
}
Replace execdrivers with containerd implementation Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com> Signed-off-by: Kenfe-Mickael Laventure <mickael.laventure@gmail.com> Signed-off-by: Anusha Ragunathan <anusha@docker.com> 2016-03-18 18:50:19 +00:00			`// +build !linux`

			`package daemon`

daemon: switch to 'ensure' workflow for AppArmor profiles In certain cases (unattended upgrades), system services can disable loaded AppArmor profiles. However, since /etc being read-only is a supported setup we cannot just write a copy of the profile to /etc/apparmor.d. Instead, dynamically load the docker-default AppArmor profile if a container is started with that profile set. This code will short-cut if the profile is already loaded. Fixes: 2f7596aaef3a ("apparmor: do not save profile to /etc/apparmor.d") Signed-off-by: Aleksa Sarai <asarai@suse.de> (cherry picked from commit 567ef8e7858ca4f282f598ba1f5a951cbad39e83) Signed-off-by: Victor Vieux <vieux@docker.com> 2016-12-05 13:12:17 +00:00			`func ensureDefaultAppArmorProfile() error {`
			`return nil`
Replace execdrivers with containerd implementation Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com> Signed-off-by: Kenfe-Mickael Laventure <mickael.laventure@gmail.com> Signed-off-by: Anusha Ragunathan <anusha@docker.com> 2016-03-18 18:50:19 +00:00			`}`