From 65af894a95335a6356457f0d70e75159a8c36097 Mon Sep 17 00:00:00 2001 From: Simon Fels Date: Wed, 23 May 2018 16:38:51 +0200 Subject: [PATCH] scripts: check if we run on an AppArmor enabled system before loading profile --- scripts/container-manager.sh | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/scripts/container-manager.sh b/scripts/container-manager.sh index cf1128a..a0fec05 100755 --- a/scripts/container-manager.sh +++ b/scripts/container-manager.sh @@ -38,8 +38,10 @@ start() { # liblxc.so.1 is in $SNAP/lib export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:$SNAP/lib - # Load the profile for our Android container - $SNAP/sbin/apparmor_parser -r $SNAP/apparmor/anbox-container.aa + if [ -d /sys/kernel/security/apparmor ] ; then + # Load the profile for our Android container + $SNAP/sbin/apparmor_parser -r $SNAP/apparmor/anbox-container.aa + fi exec $AA_EXEC $SNAP/bin/anbox-wrapper.sh container-manager \ --data-path=$DATA_PATH \