Hi. I wonder whether AppArmor allows to give a permission to a specific
process. A use case: there are UI programs (editors, viewers) that need
temporary access to a file specified by a user (to edit, to view).
Unfortunately, AppArmor profiles give permissions to executable files.
For example, if a user gives executable $E access to /tmp/$F, any user
will have access to /tmp/$F by executing $E. Hence a user need a feature
which gives permission $R to any process that executes executable $E
**as a user $U** where $R, $E, and $U are specified by the user. A
feature which gives permission $R to process $P would be nice too, but
isn't essential. There is a problem how a non-root can use this feature,
but it's a separate topic.
Does AppArmor have such a feature? Maybe, there is a better tool for
this use case?
--
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/apparmor
