Eric Windisch 7342d59114 AppArmor: Deny w to /proc/* files ...

Introduce a write denial for files at the root of /proc.

This prohibits root users from performing a chmod of those
files. The rules for denials in proc are also cleaned up,
making the rules better match their targets.

Locally tested on:
- Ubuntu precise (12.04) with AppArmor 2.7
- Ubuntu trusty (14.04) with AppArmor 2.8.95

Signed-off-by: Eric Windisch <eric@windisch.us>

2015-08-13 15:39:25 -04:00

..

fixtures

Add integration cli trust tests

2015-07-24 14:08:20 -07:00

check_test.go

fix golint warnings/errors on package api/types/

2015-08-07 09:43:43 +08:00

docker_api_attach_test.go

…

docker_api_containers_test.go

fix golint warnings/errors on package api/types/

2015-08-07 09:43:43 +08:00

docker_api_events_test.go

…

docker_api_exec_resize_test.go

Skip DockerSuite.TestExecResizeImmediatelyAfterExecStart on lxc

2015-07-27 19:20:15 -04:00

docker_api_exec_test.go

Ensure body is closed after error is checked

2015-07-23 14:34:38 +02:00

docker_api_images_test.go

Ensure body is closed after error is checked

2015-07-23 14:34:38 +02:00

docker_api_info_test.go

…

docker_api_inspect_test.go

Expose new mount points structs in inspect.

2015-07-21 15:33:05 -07:00

docker_api_logs_test.go

Ensure body is closed after error is checked

2015-07-23 14:34:38 +02:00

docker_api_network_test.go

…

docker_api_resize_test.go

…

docker_api_service_test.go

…

docker_api_stats_test.go

fix golint warnings/errors on package api/types/

2015-08-07 09:43:43 +08:00

docker_api_test.go

Ensure body is closed after error is checked

2015-07-23 14:34:38 +02:00

docker_api_version_test.go

…

docker_cli_attach_test.go

…

docker_cli_attach_unix_test.go

…

docker_cli_build_test.go

typofix - https://github.com/vlajos/misspell_fixer

2015-08-07 23:25:49 +01:00

docker_cli_build_unix_test.go

Add ulimit to docker build.

2015-07-23 10:26:06 +08:00

docker_cli_by_digest_test.go

[graph] Use a pipe for downloads to write progress

2015-08-05 18:13:39 -07:00

docker_cli_commit_test.go

…

docker_cli_config_test.go

…

docker_cli_cp_from_container_test.go

Fix docker cp Behavior With Symlinks

2015-07-30 12:14:28 -07:00

docker_cli_cp_test.go

typofix - https://github.com/vlajos/misspell_fixer

2015-08-07 23:25:49 +01:00

docker_cli_cp_to_container_test.go

Fix docker cp Behavior With Symlinks

2015-07-30 12:14:28 -07:00

docker_cli_cp_utils.go

Fix docker cp Behavior With Symlinks

2015-07-30 12:14:28 -07:00

docker_cli_create_test.go

Skip notary tests which update system clock

2015-07-29 12:09:40 -07:00

docker_cli_daemon_experimental_test.go

Windows: Workaround for CI

2015-08-05 11:20:30 -07:00

docker_cli_daemon_test.go

typofix - https://github.com/vlajos/misspell_fixer

2015-08-07 23:25:49 +01:00

docker_cli_diff_test.go

Don't pass check.C to dockerCmdWithError

2015-07-27 14:33:32 -04:00

docker_cli_events_test.go

typofix - https://github.com/vlajos/misspell_fixer

2015-08-07 23:25:49 +01:00

docker_cli_events_unix_test.go

…

docker_cli_exec_test.go

Another try to fix InspectExecID

2015-08-04 09:21:41 -07:00

docker_cli_exec_unix_test.go

Fix golint warnings for integration-cli

2015-07-22 14:03:50 +01:00

docker_cli_experimental_test.go

dockerCmd when possible

2015-07-20 14:55:40 +08:00

docker_cli_export_import_test.go

dockerCmd when possible

2015-07-20 14:55:40 +08:00

docker_cli_help_test.go

Rename to flags and environment variables to content trust

2015-07-24 16:31:18 -07:00

docker_cli_history_test.go

Don't pass check.C to dockerCmdWithError

2015-07-27 14:33:32 -04:00

docker_cli_images_test.go

Don't pass check.C to dockerCmdWithError

2015-07-27 14:33:32 -04:00

docker_cli_import_test.go

Don't pass check.C to dockerCmdWithError

2015-07-27 14:33:32 -04:00

docker_cli_info_test.go

dockerCmd when possible

2015-07-20 14:55:40 +08:00

docker_cli_inspect_experimental_test.go

Expose new mount points structs in inspect.

2015-07-21 15:33:05 -07:00

docker_cli_inspect_test.go

Don't pass check.C to dockerCmdWithError

2015-07-27 14:33:32 -04:00

docker_cli_kill_test.go

Keep backwards compatibility in kill api.

2015-07-28 12:25:36 -07:00

docker_cli_links_test.go

Don't pass check.C to dockerCmdWithError

2015-07-27 14:33:32 -04:00

docker_cli_links_unix_test.go

Don't pass check.C to dockerCmdWithError

2015-07-27 14:33:32 -04:00

docker_cli_login_test.go

…

docker_cli_logs_test.go

typofix - https://github.com/vlajos/misspell_fixer

2015-08-07 23:25:49 +01:00

docker_cli_nat_test.go

Recfactor: Use dockerCmd when possible in integration-cli tests

2015-07-20 14:44:22 +08:00

docker_cli_network_test.go

Recfactor: Use dockerCmd when possible in integration-cli tests

2015-07-20 14:44:22 +08:00

docker_cli_pause_test.go

Use busybox in 'pause' tests

2015-08-05 17:35:20 -07:00

docker_cli_port_test.go

…

docker_cli_port_unix_test.go

Don't pass check.C to dockerCmdWithError

2015-07-27 14:33:32 -04:00

docker_cli_proxy_test.go

Add and modify tests for legacy and new daemon invokations

2015-07-23 20:31:43 -04:00

docker_cli_ps_test.go

Don't pass check.C to dockerCmdWithError

2015-07-27 14:33:32 -04:00

docker_cli_pull_test.go

Skip notary tests which update system clock

2015-07-29 12:09:40 -07:00

docker_cli_push_test.go

Update regression test

2015-08-12 18:46:55 -07:00

docker_cli_rename_test.go

Replace GenerateRandomID with GenerateNonCryptoID

2015-07-28 22:31:01 -07:00

docker_cli_restart_test.go

Merge pull request #13711 from calavera/version_volumes_inspect

2015-07-22 09:02:00 +02:00

docker_cli_rm_test.go

Don't pass check.C to dockerCmdWithError

2015-07-27 14:33:32 -04:00

docker_cli_rmi_test.go

Don't pass check.C to dockerCmdWithError

2015-07-27 14:33:32 -04:00

docker_cli_run_test.go

AppArmor: Deny w to /proc/* files

2015-08-13 15:39:25 -04:00

docker_cli_run_unix_test.go

Don't pass check.C to dockerCmdWithError

2015-07-27 14:33:32 -04:00

docker_cli_save_load_test.go

Don't pass check.C to dockerCmdWithError

2015-07-27 14:33:32 -04:00

docker_cli_save_load_unix_test.go

CI: use dockerCmd in integration-cli when possible

2015-07-22 17:55:41 +08:00

docker_cli_search_test.go

Don't pass check.C to dockerCmdWithError

2015-07-27 14:33:32 -04:00

docker_cli_service_test.go

CI: use dockerCmd in integration-cli when possible

2015-07-22 17:55:41 +08:00

docker_cli_start_test.go

Don't pass check.C to dockerCmdWithError

2015-07-27 14:33:32 -04:00

docker_cli_start_volume_driver_unix_test.go

Promote volume drivers from experimental to master.

2015-07-21 09:32:44 -07:00

docker_cli_stats_test.go

Recfactor: Use dockerCmd when possible in integration-cli tests

2015-07-20 14:44:22 +08:00

docker_cli_tag_test.go

typofix - https://github.com/vlajos/misspell_fixer

2015-08-07 23:25:49 +01:00

docker_cli_top_test.go

Recfactor: Use dockerCmd when possible in integration-cli tests

2015-07-20 14:44:22 +08:00

docker_cli_version_test.go

Recfactor: Use dockerCmd when possible in integration-cli tests

2015-07-20 14:44:22 +08:00

docker_cli_wait_test.go

Recfactor: Use dockerCmd when possible in integration-cli tests

2015-07-20 14:44:22 +08:00

docker_test_vars.go

Windows: Test infrastructure plumbing

2015-08-05 14:34:32 -07:00

docker_utils.go

Merge pull request #15420 from vlajos/typofixes-vlajos-20150807

2015-08-08 01:08:49 -07:00

registry.go

[graph] Enforce manifest/layer digest verification

2015-08-03 11:41:23 -07:00

requirements_unix.go

Fix golint warnings for integration-cli

2015-07-22 14:03:50 +01:00

requirements.go

Add integration cli trust tests

2015-07-24 14:08:20 -07:00

test_vars_exec.go

…

test_vars_noexec.go

…

test_vars_unix.go

…

test_vars_windows.go

…

trust_server.go

Updated to use latest version of notary

2015-07-31 17:32:35 -07:00

utils.go

Add trust tests for Docker create, run, push, and pull

2015-07-24 14:08:20 -07:00