{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/22959","repository_url":"https://api.github.com/repos/docker/docker","labels_url":"https://api.github.com/repos/docker/docker/issues/22959/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/22959/comments","events_url":"https://api.github.com/repos/docker/docker/issues/22959/events","html_url":"https://github.com/docker/docker/pull/22959","id":156639277,"number":22959,"title":"profiles: apparmor: restrict access to private files by default.","user":{"login":"dbaxa","id":1684354,"avatar_url":"https://avatars.githubusercontent.com/u/1684354?v=3","gravatar_id":"","url":"https://api.github.com/users/dbaxa","html_url":"https://github.com/dbaxa","followers_url":"https://api.github.com/users/dbaxa/followers","following_url":"https://api.github.com/users/dbaxa/following{/other_user}","gists_url":"https://api.github.com/users/dbaxa/gists{/gist_id}","starred_url":"https://api.github.com/users/dbaxa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dbaxa/subscriptions","organizations_url":"https://api.github.com/users/dbaxa/orgs","repos_url":"https://api.github.com/users/dbaxa/repos","events_url":"https://api.github.com/users/dbaxa/events{/privacy}","received_events_url":"https://api.github.com/users/dbaxa/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/docker/docker/labels/status/1-design-review","name":"status/1-design-review","color":"fef2c0"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2016-05-25T00:35:05Z","updated_at":"2016-05-27T01:15:03Z","closed_at":"2016-05-25T14:56:42Z","pull_request":{"url":"https://api.github.com/repos/docker/docker/pulls/22959","html_url":"https://github.com/docker/docker/pull/22959","diff_url":"https://github.com/docker/docker/pull/22959.diff","patch_url":"https://github.com/docker/docker/pull/22959.patch"},"body":"**- What I did**\r\n\r\nIncluded `abstractions/private-files-strict` profile to the default apparmor profile when it is available.\r\n\r\n**- How I did it**\r\nUpdated profiles/apparmor/apparmor.go.\r\n\r\n**- How to verify it**\r\nRun a docker container and test if it is permitted to access a file that should be denied by `abstractions/private-files-strict`, for example `~/.gnupg/anything`\r\n\r\n**- Description for the changelog**\r\nWhen the abstract private-files-strict profile is defined include it in the default apparmor profile.\r\n\r\nSigned-off-by: David Black <dblack@atlassian.com>"},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/222036973","html_url":"https://github.com/docker/docker/pull/22959#issuecomment-222036973","issue_url":"https://api.github.com/repos/docker/docker/issues/22959","id":222036973,"user":{"login":"dbaxa","id":1684354,"avatar_url":"https://avatars.githubusercontent.com/u/1684354?v=3","gravatar_id":"","url":"https://api.github.com/users/dbaxa","html_url":"https://github.com/dbaxa","followers_url":"https://api.github.com/users/dbaxa/followers","following_url":"https://api.github.com/users/dbaxa/following{/other_user}","gists_url":"https://api.github.com/users/dbaxa/gists{/gist_id}","starred_url":"https://api.github.com/users/dbaxa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dbaxa/subscriptions","organizations_url":"https://api.github.com/users/dbaxa/orgs","repos_url":"https://api.github.com/users/dbaxa/repos","events_url":"https://api.github.com/users/dbaxa/events{/privacy}","received_events_url":"https://api.github.com/users/dbaxa/received_events","type":"User","site_admin":false},"created_at":"2016-05-27T01:15:03Z","updated_at":"2016-05-27T01:15:03Z","body":"Thank you for considering my pull request."}}
{"actor":{"display_login":"dbaxa"}}