So this is the latest iteration of the new profile locking and profile/
namespace directory. There has been no changes to the dir layout since
last time but several bug fixes
eg.
/sys/kernel/security/apparmor/
.load
.remove
.replace
features/
profiles
policy/ # new policy dir
profiles # profiles in the namespace
usr.bin.foo.9/ # sid-mangled profile name
name # profile name
mode # profile mode (enforce, complain)
attach # attachment re string
profiles/ # hats and children profiles
bar.12/
name
mode
namespaces/ # namespaces under root
ns1/ # example sub ns
profiles/
namespaces/
The RCU patches where reworked fixes several subtle race conditions.
patches 1-16 should already have Acks on them from review, and
patches 28-32 are there to provide a fully functional system, and should
not be review atm
Some of the new patches are setting up for changes required by the
coming labeling patches (eg. changing how 21/32 changing how profile
replacement is handled)
The other set of new patches are to allow specifying a default profile
from boot which makes doing total system confinement much easier
So once again, the set of patches that a
--
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/apparmor
