From b6e148c97136fee39a96fdf667b831be05c4105b Mon Sep 17 00:00:00 2001 From: Pascal Vizeli Date: Mon, 7 Dec 2020 10:52:42 +0100 Subject: [PATCH] AppArmor is a hard requirement (#136) --- files/hassio-supervisor | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-) diff --git a/files/hassio-supervisor b/files/hassio-supervisor index 8a31502..696d715 100644 --- a/files/hassio-supervisor +++ b/files/hassio-supervisor @@ -8,13 +8,6 @@ SUPERVISOR="$(jq --raw-output '.supervisor' ${CONFIG_FILE})" MACHINE="$(jq --raw-output '.machine' ${CONFIG_FILE})" DATA="$(jq --raw-output '.data // "/usr/share/hassio"' ${CONFIG_FILE})" -# AppArmor Support -if command -v apparmor_parser > /dev/null 2>&1 && grep hassio-supervisor /sys/kernel/security/apparmor/profiles > /dev/null 2>&1; then - APPARMOR="--security-opt apparmor=hassio-supervisor" -else - APPARMOR="--security-opt apparmor:unconfined" -fi - # Init supervisor HASSIO_DATA=${DATA} HASSIO_IMAGE_ID=$(docker inspect --format='{{.Id}}' "${SUPERVISOR}") @@ -26,7 +19,7 @@ runSupervisor() { # shellcheck disable=SC2086 docker run --name hassio_supervisor \ --privileged \ - $APPARMOR \ + --security-opt apparmor=hassio-supervisor \ --security-opt seccomp=unconfined \ -v /run/docker.sock:/run/docker.sock \ -v /run/dbus:/run/dbus \