spiegel_podman/libpod
Valentin Rothberg fe928c6b42 apparmor: don't load/set profile in privileged mode
Commit 27f9e23a0b already prevents setting the profile when creating
the spec but we also need to avoid loading and setting the profile when
creating the container.

Fixes: #3112
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2019-05-23 13:17:30 +02:00
..
common Set blob cache directory based on GraphDriver 2019-03-29 08:27:33 -04:00
driver switch projectatomic to containers 2018-08-16 17:12:36 +00:00
events set default event logger based on build tags 2019-05-14 16:17:11 -05:00
image change from sysregistries to sysregistriesv2 2019-05-03 10:38:51 -04:00
layers Initial checkin from CRI-O repo 2017-11-01 11:24:59 -04:00
lock When refreshing after a reboot, force lock allocation 2019-05-06 14:17:54 -04:00
boltdb_state.go Update vendor of buildah and containers/images 2019-05-20 13:39:40 -04:00
boltdb_state_internal.go Update vendor of buildah and containers/images 2019-05-20 13:39:40 -04:00
boltdb_state_linux.go podman-remote inspect 2019-01-18 15:43:11 -06:00
boltdb_state_unsupported.go podman-remote inspect 2019-01-18 15:43:11 -06:00
common_test.go podman-remote inspect 2019-01-18 15:43:11 -06:00
container.go Move to using constants for valid restart policy types 2019-05-03 10:36:16 -04:00
container_api.go container: move channel close to its writer 2019-05-20 19:41:02 +02:00
container_attach_linux.go Ensure that start() in StartAndAttach() is locked 2019-05-14 14:54:21 -04:00
container_attach_unsupported.go Ensure that start() in StartAndAttach() is locked 2019-05-14 14:54:21 -04:00
container_commit.go Minor fix splitting env vars in podman-commit 2019-05-19 06:51:30 +05:30
container_graph.go pod infra container is started before a container in a pod is run, started, or attached. 2019-02-15 16:39:24 -05:00
container_graph_test.go Update unit tests to use in-memory lock manager 2019-01-04 09:51:09 -05:00
container_inspect.go Add support for retry count with --restart flag 2019-05-03 10:36:16 -04:00
container_internal.go libpod: prefer WaitForFile to polling 2019-05-21 10:07:31 +02:00
container_internal_linux.go apparmor: don't load/set profile in privileged mode 2019-05-23 13:17:30 +02:00
container_internal_test.go Potentially breaking: Make hooks sort order locale-independent 2019-04-09 21:08:44 +02:00
container_internal_unsupported.go Make sure buildin volumes have the same ownership and permissions as image 2019-03-15 10:44:44 -04:00
container_linux.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
container_log.go podman logs on created container should exit 2019-03-18 08:58:48 -05:00
container_top_linux.go top: fallback to execing ps(1) 2019-05-03 11:20:16 +02:00
container_top_unsupported.go podman-top: use containers/psgo 2018-07-19 20:47:52 +00:00
container_unsupported.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
diff.go Don't output inodes created to run a container 2018-09-21 09:45:14 +00:00
errors.go Fix manual detach from containers to not wait for exit 2019-02-12 10:14:57 -05:00
events.go Add System event type and renumber, refresh events 2019-04-25 16:23:09 -04:00
healthcheck.go enable podman-remote on windows 2019-04-30 15:28:39 -05:00
healthcheck_linux.go healthcheck benign error 2019-05-13 08:33:51 -05:00
healthcheck_unsupported.go enable podman-remote on windows 2019-04-30 15:28:39 -05:00
in_memory_state.go Switch Libpod over to new explicit named volumes 2019-04-04 12:26:29 -04:00
info.go vendor buildah, image, storage, cni 2019-03-28 15:12:26 +01:00
kube.go Remove unused return statement in kube volume code 2019-05-21 23:08:39 -04:00
mounts_linux.go set root propagation based on volume properties 2018-11-26 13:55:02 +01:00
networking_linux.go network: raise a clearer error when using CNI 2019-05-14 15:37:47 +02:00
networking_unsupported.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
oci.go libpod: prefer WaitForFile to polling 2019-05-21 10:07:31 +02:00
oci_linux.go enable podman-remote on windows 2019-04-30 15:28:39 -05:00
oci_unsupported.go enable podman-remote on windows 2019-04-30 15:28:39 -05:00
options.go Move to using constants for valid restart policy types 2019-05-03 10:36:16 -04:00
pod.go Convert pods to SHM locks 2019-01-04 09:51:09 -05:00
pod_api.go Sending signals to containers prevents restart policy 2019-05-03 10:36:16 -04:00
pod_internal.go When refreshing after a reboot, force lock allocation 2019-05-06 14:17:54 -04:00
pod_top_linux.go Add podman pod top 2018-08-23 15:01:17 +00:00
pod_top_unsupported.go Add podman pod top 2018-08-23 15:01:17 +00:00
runtime.go rootless: use a pause process 2019-05-17 20:48:24 +02:00
runtime_ctr.go Use standard remove functions for removing pod ctrs 2019-05-10 14:14:29 -04:00
runtime_img.go Use standard remove functions for removing pod ctrs 2019-05-10 14:14:29 -04:00
runtime_img_test.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
runtime_migrate.go system: migrate stops the pause process 2019-05-17 20:48:25 +02:00
runtime_migrate_unsupported.go system: migrate stops the pause process 2019-05-17 20:48:25 +02:00
runtime_pod.go Fixing network ns segfault 2018-08-23 18:16:28 +00:00
runtime_pod_infra_linux.go Fix generation of infra container command 2019-03-10 14:25:13 -04:00
runtime_pod_linux.go When removing pods, free their locks 2019-05-14 10:38:21 -04:00
runtime_pod_unsupported.go Added option to share kernel namespaces in libpod and podman 2018-08-23 18:16:28 +00:00
runtime_renumber.go Add System event type and renumber, refresh events 2019-04-25 16:23:09 -04:00
runtime_volume.go Add event logging to libpod, even display to podman 2019-03-11 15:08:59 -05:00
runtime_volume_linux.go Use standard remove functions for removing pod ctrs 2019-05-10 14:14:29 -04:00
runtime_volume_unsupported.go Add gating tasks 2019-03-13 12:10:35 -05:00
state.go Switch Libpod over to new explicit named volumes 2019-04-04 12:26:29 -04:00
state_test.go Add ability to rewrite pod configs in the database 2019-02-21 10:51:42 -05:00
stats.go Add ability for ubuntu to be tested 2018-10-03 12:45:37 -05:00
stats_config.go changes to allow for darwin compilation 2018-06-29 20:44:09 +00:00
stats_unsupported.go changes to allow for darwin compilation 2018-06-29 20:44:09 +00:00
storage.go OpenTracing support added to start, stop, run, create, pull, and ps 2019-02-18 09:57:08 -05:00
util.go util: fix race condition in WaitForFile 2019-05-20 19:40:15 +02:00
util_linux.go Default to SELinux private label for play kube mounts 2019-03-28 09:54:31 -04:00
util_test.go Stage3 Image Library 2018-03-14 20:21:31 +00:00
util_unsupported.go Default to SELinux private label for play kube mounts 2019-03-28 09:54:31 -04:00
version.go enable podman-remote version 2019-01-21 15:23:30 -06:00
volume.go volumes: push the chown logic to runtime_volume_linux.go 2019-03-29 14:04:44 +01:00
volume_internal.go Remove locks from volumes 2019-02-21 10:51:42 -05:00