containers
/
podman
mirror of https://github.com/containers/podman.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
1,487 Commits 51 Branches 248 Tags 259 MiB
Commit Graph

2 Commits

Author SHA1 Message Date
Valentin Rothberg 8569ed0305 AppArmor: runtime check if it's enabled on the host 
Check at runtime if AppArmor is enabled on the host.

Signed-off-by: Valentin Rothberg <vrothberg@suse.com>

Closes: #1128
Approved by: mheon
 2018-07-23 18:11:09 +00:00
Valentin Rothberg 06ab343bd7 podman/libpod: add default AppArmor profile 
Make users of libpod more secure by adding the libpod/apparmor package
to load a pre-defined AppArmor profile.  Large chunks of libpod/apparmor
come from github.com/moby/moby.

Also check if a specified AppArmor profile is actually loaded and throw
an error if necessary.

The default profile is loaded only on Linux builds with the `apparmor`
buildtag enabled.

Signed-off-by: Valentin Rothberg <vrothberg@suse.com>

Closes: #1063
Approved by: rhatdan
 2018-07-11 16:36:24 +00:00