[lxc-devel] [lxc/lxc] 7196c7: apparmor: check for mount feature at a better time

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: 7196c7b37c4dec6fc206fe4240eca8ef63119e42
      https://github.com/lxc/lxc/commit/7196c7b37c4dec6fc206fe4240eca8ef63119e42
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2014-10-20 (Mon, 20 Oct 2014)

  Changed paths:
    M src/lxc/lsm/apparmor.c

  Log Message:
  -----------
  apparmor: check for mount feature at a better time

Check for it when we check for apparmor being enabled, rather
than doing it during the middle of a container setup.

This avoid the need to try mounting /sys and /sys/kernel/security
in the middle of startup, which we may not be allowed to anyway.

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>
Acked-by: Dwight Engen <dwight.engen at oracle.com>