From aab12e6948e27fcb9351ae3f5beb5ff49e4db619 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Tue, 12 Aug 2025 11:07:08 +0200
Subject: [PATCH] fix(profile): dockerd can be installed in both bin or sbin
 depending of the package source.

---
 apparmor.d/groups/virt/dockerd | 2 +-
 tests/sbin.list                | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/apparmor.d/groups/virt/dockerd b/apparmor.d/groups/virt/dockerd
index 44d9f64a0..aa0a9ed58 100644
--- a/apparmor.d/groups/virt/dockerd
+++ b/apparmor.d/groups/virt/dockerd
@@ -6,7 +6,7 @@ abi <abi/4.0>,
 
 include <tunables/global>
 
-@{exec_path} = @{bin}/dockerd
+@{exec_path} = @{bin}/dockerd @{sbin}/dockerd #aa:lint ignore=sbin
 profile dockerd @{exec_path} flags=(attach_disconnected) {
   include <abstractions/base>
   include <abstractions/bus-system>
diff --git a/tests/sbin.list b/tests/sbin.list
index a8b439478..8ee14fd21 100644
--- a/tests/sbin.list
+++ b/tests/sbin.list
@@ -171,6 +171,7 @@ dmidecode
 dmraid
 dmsetup
 dnsmasq
+dockerd
 dosfsck
 dosfslabel
 dpkg-preconfigure