Brian Goff d9834f872c Add support for apparmor/selinux ... Set's an apparmor profile on the OCI spec if one is configred on the worker. Adds selinux labels to containers (only added if selinux is enabled on the system). This assumes that the specified apparmor profile is already loaded on the system and does not try to load it or even check if it is loaded. SELinux support requires the `selinux` build tag to be added. Likewise, `runc` would require both the `apparmor` and `selinux` build tags. Signed-off-by: Brian Goff <cpuguy83@gmail.com> Vendored go-selinux to v1.8.0 Fixed tests Signed-off-by: Tibor Vass <tibor@docker.com> (cherry picked from commit 68bb095353) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>		2021-02-04 22:01:34 +01:00
..
executor.go	Add support for apparmor/selinux	2021-02-04 22:01:34 +01:00
executor_common.go	update go-runc to use runc.ExitError for container exec status	2020-10-20 06:44:29 +00:00
executor_linux.go	update go-runc mod, use runc Started chan	2020-10-21 19:12:56 +00:00