On 8/27/19 6:28 PM, [email protected] wrote:
> Any chance the NNP override made it upstream?  I don't mean to be a nag -- if 
> there is a string or something I can search for to discover when this 
> happens, please point me in the right direction.
> 
> I finally have some time to work on the FullSystemPolicy stuff again --  I 
> know John Johansen mentioned that there might be a test kernel for the nnp 
> override otherwise?  I think there was a problem with userspace that can work 
> with it back in June, but maybe progress has been made since then?
> 
> Appreciate everything you guys are doing,

It hasn't yet, and I haven't had a chance to get back to the patch to fix its 
issues. It is high on the priority list, but with my current schedule I don't 
expect I will be able to get to it for a few weeks.

When a test kernel is ready I can point you at it. You will indeed need an 
updated userspace capable of specifying the override on your exec rule. I'll 
make sure to get a PR up for that as well when the kernel is ready.






-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to