This is being caused by a bug fix in apparmor that places tighter requirements on the use of change_onexec from a multi-threaded application.
How to best resolve this issue on the apparmor side is being investigated. It is very likely that docker is not using the change_profile api correctly, and should be audited as well.
This is being caused by a bug fix in apparmor that places tighter requirements on the use of change_onexec from a multi-threaded application.
How to best resolve this issue on the apparmor side is being investigated. It is very likely that docker is not using the change_profile api correctly, and should be audited as well.