Skip to content

lan1120/docker_default_apparmor

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

13 Commits
 
 
 
 
 
 
 
 

Repository files navigation

docker_default_apparmor

After v1.13, Docker now generates docker-default in tmpfs, loads it into the kernel using apparmor_parser, and deletes the file.
docker_default_apparmor can help you to obtain docker-default apparmor! Please

(1) check the docker_default that have been loaded to the kernel

image

(2) Create a working directory

mkdir /tmp/docker/
cd /tmp/docker/
copy docker-default-tmp to /tmp/docker/

(3) Delete the docker_default that have been loaded to the kernel

apparmor_parser -R docker-default-tmp
Then you can not find docker_default when execute apparmor_status
image

(4) Backup copy /sbin/apparmor_parser

cp -p /sbin/apparmor_parser /tmp/docker/apparmor_parser.bk

(5) Copy the new apparmor_parser to /sbin/

(6) Create a container

docker run -it --rm 4179ca8f538c bash

(7) You can obtain the real docker_default in /tmp/docker/

image

(8) Don't forget to restore the environment

About

Get docker default_apparmor

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages