From d858682194541ef8e1c9f13bf9e1e31e60fa1818 Mon Sep 17 00:00:00 2001 From: Simon Fels Date: Tue, 12 Jun 2018 09:04:45 +0200 Subject: [PATCH] container: don't load apparmor profile yet --- src/anbox/container/lxc_container.cpp | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/anbox/container/lxc_container.cpp b/src/anbox/container/lxc_container.cpp index 2cfe9b1..24370fd 100644 --- a/src/anbox/container/lxc_container.cpp +++ b/src/anbox/container/lxc_container.cpp @@ -275,7 +275,11 @@ void LxcContainer::start(const Configuration &configuration) { setup_network(); +#if 0 set_config_item("lxc.apparmor.profile", "anbox-container"); +#else + set_config_item("lxc.apparmor.profile", "unconfined"); +#endif if (!privileged_) setup_id_map();