Ed W:
> Hi, I noticed the comment on the aufs SF page that perhaps AppArmour
> will not work with aufs? Is this comment still accurate as of current?
> What level of work might be required to implement the relevant
> delegation of security to get it going?
Is this what you talking about?
----------------------------------------------------------------------
Currently these features are dropped temporary from aufs2.
See design/08plan.txt in detail.
:::
- delegation mode (dlgt)
a delegation of the internal branch access to support task I/O
accounting, which also supports Linux Security Modules (LSM) mainly
for Suse AppArmor.
----------------------------------------------------------------------
Aufs1 implemented the delegation mode (mount option "dlgt"), but aufs2
doesn't. It doesn't mean LSM is unusable aufs2.
Although I don't test LSM with aufs2, I think you can do it.
J. R. Okajima
------------------------------------------------------------------------------
Free Software Download: Index, Search & Analyze Logs and other IT data in
Real-Time with Splunk. Collect, index and harness all the fast moving IT data
generated by your applications, servers and devices whether physical, virtual
or in the cloud. Deliver compliance at lower cost and gain new business
insights. http://p.sf.net/sfu/splunk-dev2dev
