Comment 12 for bug 1824812

Revision history for this message
Jamie Strandboge (jdstrand) wrote : Re: apparmor no more starting in Disco LXD containers

This is due to a bug in upstream parser/rc.apparmor.functions because SFS_MOUNTPOINT is only set after is_apparmor_loaded() is called, but is_container_with_internal_policy() doesn't call it. /lib/apparmor/apparmor.systemd calls is_container_with_internal_policy() prior to apparmor_start() and it is only through apparmor_start() that is_apparmor_loaded() is called.