Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | AppArmor: runtime check if it's enabled on the host | Valentin Rothberg | 2018-07-23 |
| | | | | | | | | | Check at runtime if AppArmor is enabled on the host. Signed-off-by: Valentin Rothberg <vrothberg@suse.com> Closes: #1128 Approved by: mheon | ||
* | podman/libpod: add default AppArmor profile | Valentin Rothberg | 2018-07-11 |
Make users of libpod more secure by adding the libpod/apparmor package to load a pre-defined AppArmor profile. Large chunks of libpod/apparmor come from github.com/moby/moby. Also check if a specified AppArmor profile is actually loaded and throw an error if necessary. The default profile is loaded only on Linux builds with the `apparmor` buildtag enabled. Signed-off-by: Valentin Rothberg <vrothberg@suse.com> Closes: #1063 Approved by: rhatdan |