** Tags added: aa-kernel
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
apparmor module parameters can be changed after the policy is locked
Status in AppArmor:
Status in linux package in Ubuntu:
Status in linux source package in Xenial:
Status in linux source package in Yakkety:
the policy_lock parameter is a one way switch that prevents policy
from being further modified. Unfortunately some of the module parameters
can effectively modify policy by turning off enforcement.
split policy_admin_capable into a view check and a full admin check,
and update the admin check to test the policy_lock parameter.
To manage notifications about this bug go to:
Mailing list: https://launchpad.net/~kernel-packages
Post to : email@example.com
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp