On Tue, Jan 26, 2016 at 03:17:19PM -0600, Tyler Hicks wrote: > > > 2. stack_onexec, stack delayed until exec applied pre-exec transitions > > > A -- stack_onexec B -- exec apply stack -- A//&B -- exec trans --> C//&D
> Do you feel like #2 is still useful? I don't want to put words in John's > mouth (so correct me if I'm wrong, John) but I feel like he and I were > focusing on #1 and #3. No, I don't think #2 is worth keeping. It feels too confusing. If the program author wants this behaviour, aa_stack_profile() would allow the B -> D transition at exec time, though the intermediate behaviour would be different. Thanks
signature.asc
Description: Digital signature
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
