kubernetes/pkg/security/apparmor
Sascha Grunert 0d22571519
Remove check for apparmor_parser in AppArmor host validation
The `apparmor_parser` binary is not really required for a system to run
AppArmor from a Kubernetes perspective. How to apply the profile is more
in the responsibility of lower level runtimes like CRI-O and containerd,
which may do the binary check on their own.

This synchronizes the current libcontainer implementation with the
vendored Kubernetes source code and allows distributions to use
AppArmor, even when they do not have the parser available in
`/sbin/apparmor_parser`.

Signed-off-by: Sascha Grunert <mail@saschagrunert.de>
2021-03-02 18:40:14 +01:00
..
testdata
helpers.go move apparmor annotation constants to k8s.io/api/core/v1 2020-04-06 10:22:04 -04:00
validate_disabled.go
validate_test.go move apparmor annotation constants to k8s.io/api/core/v1 2020-04-06 10:22:04 -04:00
validate.go Remove check for apparmor_parser in AppArmor host validation 2021-03-02 18:40:14 +01:00