The target profile is loaded:
$ sudo aa-status|grep docker
docker-default
I tried this on the 3.16.0-9.14 and 3.16.0-16.22 distro kernels. The 'docker run' command succeeds. If I do this:
$ sudo docker run -i -t ubuntu:trusty /bin/sh
I can verify the container is launched under confinement here:
sudo aa-status|grep docker
docker-default
docker-default (2209)
$ ps -Z 2209
LABEL PID TTY STAT TIME COMMAND
docker-default 2209 pts/1 Ss+ 0:00 /bin/sh
The target profile is loaded:
$ sudo aa-status|grep docker
docker-default
I tried this on the 3.16.0-9.14 and 3.16.0-16.22 distro kernels. The 'docker run' command succeeds. If I do this:
$ sudo docker run -i -t ubuntu:trusty /bin/sh
I can verify the container is launched under confinement here:
sudo aa-status|grep docker
docker-default
docker-default (2209)
$ ps -Z 2209
LABEL PID TTY STAT TIME COMMAND
docker-default 2209 pts/1 Ss+ 0:00 /bin/sh