diff --git a/parser/rc.apparmor.functions b/parser/rc.apparmor.functions index 2eb5113a2..62ae90f4f 100644 --- a/parser/rc.apparmor.functions +++ b/parser/rc.apparmor.functions @@ -68,7 +68,7 @@ is_apparmor_present() { # something like `systemd-detect-virt --container`. # # The only known container environments capable of supporting internal policy -# are LXD and LXC environment. +# are LXD and LXC environments, and Windows Subsystem for Linux. # # Returns 0 if the container environment is capable of having its own internal # policy and non-zero otherwise. @@ -90,6 +90,11 @@ is_container_with_internal_policy() { local ns_stacked local ns_name + # WSL needs to be detected explicitly + if [ $(systemd-detect-virt --container) = "wsl" ]; then + return 0 + fi + if ! [ -f "$ns_stacked_path" ] || ! [ -f "$ns_name_path" ]; then return 1 fi