Hi,
is it expected that merely including abstractions/base allows to run
e.g. /bin/echo and /bin/sleep?
<demo>
$ cat /etc/apparmor.d/empty
#include <tunables/global>
profile empty {
#include <abstractions/base>
}
# apparmor_parser -r /etc/apparmor.d/empty && aa-exec -p empty /bin/echo bla
bla
</demo>
Or is it just a side-effect of how aa-exec works, and a real confined
program would not be allowed to do the same?
Cheers,
--
intrigeri
--
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/apparmor
