Function CanLoadNewProfile

pkg/apparmorutil/apparmorutil_linux.go:73–75

CanLoadNewProfile returns whether the current process can load a new AppArmor profile. CanLoadNewProfile needs root. CanLoadNewProfile checks both /sys/module/apparmor/parameters/enabled and /sys/kernel/security. Related: https://gitlab.com/apparmor/apparmor/-/blob/v3.0.3/libraries/libapparmor/sr

()

//
// Related: https://gitlab.com/apparmor/apparmor/-/blob/v3.0.3/libraries/libapparmor/src/kernel.c#L311
func CanLoadNewProfile() bool {
	return !userns.RunningInUserNS() && os.Geteuid() == 0 && hostSupports()
}

var (
	paramEnabled     bool