Function getApparmorSecurityOpts

core/security_context.go:303–318

getApparmorSecurityOpts gets apparmor options from container config.

(
	sc *runtimeapi.LinuxContainerSecurityContext,
	separator rune,
)

// getApparmorSecurityOpts gets apparmor options from container config.
func getApparmorSecurityOpts(
	sc *runtimeapi.LinuxContainerSecurityContext,
	separator rune,
) ([]string, error) {
	if sc == nil || sc.ApparmorProfile == "" {
		return nil, nil
	}

	appArmorOpts, err := getAppArmorOpts(sc.ApparmorProfile)
	if err != nil {
		return nil, err
	}

	fmtOpts := FmtDockerOpts(appArmorOpts, separator)
	return fmtOpts, nil
}

func getAppArmorOpts(profile string) ([]DockerOpt, error) {
	if profile == "" || profile == config.AppArmorBetaProfileRuntimeDefault {