From: Martin Pitt <martin.pitt@ubuntu.com>
Date: Thu, 7 May 2015 11:38:50 +0000 (+0200)
Subject: Call /lib/apparmor/profile-load directly instead of the wrapper
X-Git-Tag: lxc-1.0.8~137
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=13f71519b4339d3e24893b2f26b079342241ffe8;p=thirdparty%2Flxc.git

Call /lib/apparmor/profile-load directly instead of the wrapper

AppArmor ships /lib/apparmor/profile-load. /lib/init/apparmor-profile-load is
merely a wrapper which calls the former, so just call it directly to avoid the
dependency on the wrapper.

LP: #1432683
---

diff --git a/config/init/upstart/lxc.conf b/config/init/upstart/lxc.conf
index fae883681..aeb11fe95 100644
--- a/config/init/upstart/lxc.conf
+++ b/config/init/upstart/lxc.conf
@@ -36,9 +36,9 @@ pre-start script
 	# don't load profiles if mount mediation is not supported
 	SYSF=/sys/kernel/security/apparmor/features/mount/mask
 	if [ -f $SYSF ]; then
-		if [ -x /lib/init/apparmor-profile-load ]; then
-			/lib/init/apparmor-profile-load usr.bin.lxc-start
-			/lib/init/apparmor-profile-load lxc-containers
+		if [ -x /lib/apparmor/profile-load ]; then
+			/lib/apparmor/profile-load usr.bin.lxc-start
+			/lib/apparmor/profile-load lxc-containers
 		fi
 	fi