Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | pkg/apparmor: move data under Linux/apparmor buildtags | Valentin Rothberg | 2018-08-14 |
| | | | | | | | | | | Move all Linux-related data under the corresponding buildtags to reduce the memory footprint and speed up compilation for non-apparmor builds. Signed-off-by: Valentin Rothberg <vrothberg@suse.com> Closes: #1262 Approved by: mheon | ||
* | podman/libpod: add default AppArmor profile | Valentin Rothberg | 2018-07-11 |
Make users of libpod more secure by adding the libpod/apparmor package to load a pre-defined AppArmor profile. Large chunks of libpod/apparmor come from github.com/moby/moby. Also check if a specified AppArmor profile is actually loaded and throw an error if necessary. The default profile is loaded only on Linux builds with the `apparmor` buildtag enabled. Signed-off-by: Valentin Rothberg <vrothberg@suse.com> Closes: #1063 Approved by: rhatdan |