Please sign in to comment.
libcontainer: remove dependency on libapparmor
libapparmor is integrated in libcontainer using cgo but is only used to call a single function: aa_change_onexec. It turns out this function is simple enough (writing a string to a file in /proc/<n>/attr/...) to be re-implemented locally in libcontainer in plain Go. This allows to drop the dependency on libapparmor and the corresponding cgo integration. Fixes #1674 Signed-off-by: Tobias Klauser <firstname.lastname@example.org>
- Loading branch information...
Showing with 28 additions and 13 deletions.