Aleksa Sarai d90edcd897 apparmor: do not save profile to /etc/apparmor.d ...

Writing the profile to /etc/apparmor.d, while also manually loading it
into the kernel results in quite a bit of confusion. In addition, it
means that people using apparmor but have /etc mounted read-only cannot
use apparmor at all on a Docker host.

Fix this by writing the profile to a temporary directory and deleting it
after it's been inserted.

Signed-off-by: Aleksa Sarai <asarai@suse.de>
Upstream-commit: 2f7596aaef3a9f8ec1f2d0937462d9263bee8b6b
Component: engine

2016-09-13 16:25:16 +10:00

..

engine

apparmor: do not save profile to /etc/apparmor.d

2016-09-13 16:25:16 +10:00