From 8ca469c247c8f4fbc05adaf94243ead87f33dbac Mon Sep 17 00:00:00 2001
From: Dean Chen <862469039@qq.com>
Date: Sun, 16 Aug 2026 05:50:22 +0500
Subject: [PATCH 1/2] docs: say contrib/apparmor is the CLI profile

Signed-off-by: Dean Chen <862469039@qq.com>
---
 content/manuals/engine/security/apparmor.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/content/manuals/engine/security/apparmor.md b/content/manuals/engine/security/apparmor.md
index 8b6b1e0433dd..0902ebf0f64a 100644
--- a/content/manuals/engine/security/apparmor.md
+++ b/content/manuals/engine/security/apparmor.md
@@ -17,11 +17,11 @@ loads it into the kernel.
 >
 > This profile is used on containers, not on the Docker daemon.
 
-A profile for the Docker Engine daemon exists but it is not currently installed
-with the `deb` packages. If you are interested in the source for the daemon
-profile, it is located in
+No AppArmor profile for `dockerd` is shipped with the `deb` packages. The
+files under
 [contrib/apparmor](https://github.com/moby/moby/tree/master/contrib/apparmor)
-in the Docker Engine source repository.
+in the Moby repository are a profile for the `/usr/bin/docker` CLI, not for
+the daemon.
 
 ## Understand the policies
 

From f08f9e8db9f80f06cb24fb4da76ba12d2cf41c7c Mon Sep 17 00:00:00 2001
From: Dean Chen <862469039@qq.com>
Date: Sun, 16 Aug 2026 23:42:51 +0500
Subject: [PATCH 2/2] docs: call /usr/bin/docker the CLI in the AppArmor debug
 notes

Signed-off-by: Dean Chen <862469039@qq.com>
---
 content/manuals/engine/security/apparmor.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/manuals/engine/security/apparmor.md b/content/manuals/engine/security/apparmor.md
index 0902ebf0f64a..945099989893 100644
--- a/content/manuals/engine/security/apparmor.md
+++ b/content/manuals/engine/security/apparmor.md
@@ -215,7 +215,7 @@ looks like the following:
 ```
 
 In the above example, you can see `profile=/usr/bin/docker`. This means the
-user has the `docker-engine` (Docker Engine daemon) profile loaded.
+user has the Docker CLI profile loaded.
 
 Look at another log line:
 
@@ -267,7 +267,7 @@ container PIDs is in `enforce` mode. This means AppArmor is actively blocking
 and auditing in `dmesg` anything outside the bounds of the `docker-default`
 profile.
 
-The output above also shows the `/usr/bin/docker` (Docker Engine daemon) profile
+The output above also shows the `/usr/bin/docker` (Docker CLI) profile
 is running in `complain` mode. This means AppArmor only logs to `dmesg`
 activity outside the bounds of the profile. (Except in the case of Ubuntu
 Trusty, where some interesting behaviors are enforced.)
@@ -275,7 +275,7 @@ Trusty, where some interesting behaviors are enforced.)
 ## Contribute to Docker's AppArmor code
 
 Advanced users and package managers can find a profile for `/usr/bin/docker`
-(Docker Engine daemon) underneath
+(the Docker CLI) underneath
 [contrib/apparmor](https://github.com/moby/moby/tree/master/contrib/apparmor)
 in the Docker Engine source repository.