Skip to content

docs: say contrib/apparmor is the CLI profile - #25848

Open
locker95 wants to merge 2 commits into
docker:mainfrom
locker95:docs/apparmor-cli-not-daemon
Open

docs: say contrib/apparmor is the CLI profile#25848
locker95 wants to merge 2 commits into
docker:mainfrom
locker95:docs/apparmor-cli-not-daemon

Conversation

@locker95

Copy link
Copy Markdown
Contributor

The contrib/apparmor template is profile /usr/bin/docker, not dockerd. The old wording made it look like a daemon profile.

Fixes #12675

Signed-off-by: Dean Chen <862469039@qq.com>
@locker95
locker95 requested a review from dvdksn as a code owner August 16, 2026 00:50
@netlify

netlify Bot commented Aug 16, 2026

Copy link
Copy Markdown

Deploy Preview for docsdocker ready!

Name Link
🔨 Latest commit f08f9e8
🔍 Latest deploy log https://app.netlify.com/projects/docsdocker/deploys/6a8204b092046d0008035033
😎 Deploy Preview https://deploy-preview-25848--docsdocker.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@github-actions github-actions Bot added area/engine Issue affects Docker engine/daemon area/security labels Aug 16, 2026
@santhiprakash

Copy link
Copy Markdown
Contributor

Verified against moby/moby `contrib/apparmor/template.go`: the profile is `profile /usr/bin/docker` (CLI), not `dockerd`.

This PR fixes the intro paragraph. The same mislabel still appears in the debug/contribute sections:

  • dmesg explanation (~L217-218): still says the `/usr/bin/docker` profile is the Engine daemon
  • `aa-status` explanation (~L270): same
  • Contribute section (~L277-279): same

Worth correcting those in this PR so #12675 is fully resolved.

Signed-off-by: Dean Chen <862469039@qq.com>
@locker95

Copy link
Copy Markdown
Contributor Author

good catch — those three still said daemon. flipped them to CLI.

@santhiprakash

Copy link
Copy Markdown
Contributor

Verified the three follow-up spots against moby/moby contrib/apparmor/template.go — all now correctly describe the /usr/bin/docker CLI profile. The PR is now internally consistent end to end.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/engine Issue affects Docker engine/daemon area/security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

References to Docker Engine daemon(!) AppArmor Profile are misleading/incorrect and point to Docker CLI(!) AppArmor Profile

2 participants