@@ -9,3 +9,4 @@ contrib/init/systemd/docker.socket lib/systemd/system/

 contrib/mk* usr/share/docker-engine/contrib/

 contrib/nuke-graph-directory.sh usr/share/docker-engine/contrib/

 contrib/syntax/nano/Dockerfile.nanorc usr/share/nano/

+contrib/apparmor/docker-engine etc/apparmor.d/

@@ -32,5 +32,9 @@ override_dh_installudev:

 	# match our existing priority

 	dh_installudev --priority=z80

+override_dh_install:

+	dh_install

+	dh_apparmor --profile-name=docker-engine -pdocker-engine

+

 %:

 	dh $@ --with=bash-completion $(shell command -v dh_systemd_enable > /dev/null 2>&1 && echo --with=systemd)

@@ -57,6 +57,8 @@ set -e

 			echo 'ENV DOCKER_EXPERIMENTAL 1' >> "$DEST/$version/Dockerfile.build"

 		fi

 		cat >> "$DEST/$version/Dockerfile.build" <<-EOF

+			RUN go build -o aagen contrib/apparmor/*.go \

+				&& ./aagen contrib/apparmor/docker-engine

 			RUN ln -sfv hack/make/.build-deb debian

 			RUN { echo '$debSource (${debVersion}-0~${suite}) $suite; urgency=low'; echo; echo '  * Version: $VERSION'; echo; echo " -- $debMaintainer  $debDate"; } > debian/changelog && cat >&2 debian/changelog

 			RUN dpkg-buildpackage -uc -us