github/containerd
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity

adds support for AppArmor

Browse Source 
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
This commit is contained in:
Mike Brown
2017-08-23 14:03:11 -05:00
parent 4f449cec5f
commit 4f442de959
7 changed files with 44 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
pkg/server/sandbox_run.go
View File

@@ -294,7 +294,9 @@ func (c *criContainerdService) generateSandboxContainerSpec(id string, config *r
g.AddLinuxSysctl(key, value)
}
// TODO(random-liu): [P2] Set apparmor and seccomp from annotations.
// TODO(random-liu): [P2] Set seccomp
// Note: LinuxSandboxSecurityContext does not currently provide an apparmor profile
g.SetLinuxResourcesCPUShares(uint64(defaultSandboxCPUshares))
g.SetProcessOOMScoreAdj(int(defaultSandboxOOMAdj))