apparmor

Documentation

Index

• func DumpDefaultProfile(name string) (string, error)
• func LoadDefaultProfile(name string) error
• func WithDefaultProfile(name string) oci.SpecOpts
• func WithProfile(profile string) oci.SpecOpts

Functions

func DumpDefaultProfile

func DumpDefaultProfile(name string) (string, error)

DumpDefaultProfile dumps the default profile with the given name.

func LoadDefaultProfile

func LoadDefaultProfile(name string) error

LoadDefaultProfile ensures the default profile to be loaded with the given name. Returns nil error if the profile is already loaded.

func WithDefaultProfile

func WithDefaultProfile(name string) oci.SpecOpts

WithDefaultProfile will generate a default apparmor profile under the provided name for the container. It is only generated if a profile under that name does not exist.

FIXME: pkg/cri/[sb]server/container_create_linux_test.go depends on go:noinline since Go 1.21.

func WithProfile

func WithProfile(profile string) oci.SpecOpts

WithProfile sets the provided apparmor profile to the spec