[Bug 978297] Re: apparmor should quietly return success in a container
Dave Walker
davewalker at ubuntu.com
Tue Apr 10 20:22:58 UTC 2012
** Tags added: rls-mgr-p-tracking
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to upstart in Ubuntu.
https://bugs.launchpad.net/bugs/978297
Title:
apparmor should quietly return success in a container
Status in “apparmor” package in Ubuntu:
In Progress
Status in “upstart” package in Ubuntu:
In Progress
Bug description:
In precise, containers are not allowed to load profiles. This will be
allowed later, but for now apparmor should not prevent things from
starting in a container because of failures to load or transition to
profiles.
1. /etc/init.d/apparmor should return 0 if in a container
2. /lib/init/apparmor-profile-load should do nothing and return 0 if
in a container.
Since the container is already locked into a (customizable) container
profile, this is ok.
(Note that admins can have containers running unconfined and with all
capabilities, but that is a special case.)
THis is needed for bug 978147.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/978297/+subscriptions
More information about the foundations-bugs
mailing list