On Wed, Nov 21, 2012 at 09:21:10AM -0800, John Johansen wrote: > On 11/21/2012 08:09 AM, Steve Beattie wrote: > > On Tue, Nov 20, 2012 at 08:39:49PM -0800, John Johansen wrote: > >> Instead of limiting the setting of the processes limits to current, > >> relax this to tasks confined by the same profile, as the apparmor > >> controls for rlimits are at a profile level granularity. > > > > Nifty. This would allow the use of prlimit(3) on processes with the same > > profile? Or am I missing another situation where you'd be setting a > > limit on another process? > > > yes. It also plays into plans to allow controlling who you can set via > prlimit with an extended rlimit rule that will come at some point.
Yeah, that's a cool extension, too. (Though I do wonder if anything actually uses prlimit(3) currently...) -- Steve Beattie <[email protected]> http://NxNW.org/~steve/
signature.asc
Description: Digital signature
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
