Bjorn Neergaard 19039eae0b profiles/apparmor: deny /sys/devices/virtual/powercap ... While this is not strictly necessary as the default OCI config masks this path, it is possible that the user disabled path masking, passed their own list, or is using a forked (or future) daemon version that has a modified default config/allows changing the default config. Add some defense-in-depth by also masking out this problematic hardware device with the AppArmor LSM. Signed-off-by: Bjorn Neergaard <bjorn.neergaard@docker.com> (cherry picked from commit bddd826d7a) Signed-off-by: Bjorn Neergaard <bjorn.neergaard@docker.com>		2023-09-18 16:43:36 -06:00
..
apparmor.go	profiles/apparmor: remove use of aaparser.GetVersion()	2023-05-09 16:48:58 +02:00
template.go	profiles/apparmor: deny /sys/devices/virtual/powercap	2023-09-18 16:43:36 -06:00