Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | pkg/apparmor: move all linux-code into apparmor_linux* | Valentin Rothberg | 2018-08-14 |
| | | | | | | | | | For easier maintenance and clearer structure of the code. Signed-off-by: Valentin Rothberg <vrothberg@suse.com> Closes: #1262 Approved by: mheon | ||
* | podman/libpod: add default AppArmor profile | Valentin Rothberg | 2018-07-11 |
Make users of libpod more secure by adding the libpod/apparmor package to load a pre-defined AppArmor profile. Large chunks of libpod/apparmor come from github.com/moby/moby. Also check if a specified AppArmor profile is actually loaded and throw an error if necessary. The default profile is loaded only on Linux builds with the `apparmor` buildtag enabled. Signed-off-by: Valentin Rothberg <vrothberg@suse.com> Closes: #1063 Approved by: rhatdan |