apparmor

package

v0.12.0 Latest Latest Go to latest Published: Jul 28, 2026 License: Apache-2.0 Imports: 5 Imported by: 0

Details

Package apparmor provides AppArmor profile management.

View Source

const DefaultProfileTemplate = `` /* 1840-byte string literal not displayed */

DefaultProfileTemplate is the default Doki AppArmor profile template. AE9: Restricts file access, network, capabilities, and mounts.

This section is empty.

func IsAppArmorAvailable() bool

IsAppArmorAvailable checks specifically for AppArmor (not SELinux).

func IsEnabled() bool

IsEnabled checks if AppArmor is available on the system.

func IsSELinuxAvailable() bool

IsSELinuxAvailable checks if SELinux is available (Android fallback).

func LoadProfile(profile *Profile) error

LoadProfile loads an AppArmor profile into the kernel.

func UnloadProfile(name string) error

UnloadProfile removes an AppArmor profile from the kernel.

type Profile struct {
	Name    string
	Content string
}

Profile represents an AppArmor profile.

func NewProfile(containerName string) (*Profile, error)

NewProfile creates a new AppArmor profile for a container.