Re: [apparmor] Confinement inheritance with ix

2020-08-14 Thread Seth Arnold
On Sat, Aug 15, 2020 at 12:09:55AM +0200, Jonas Große Sundrup wrote: > The executable in question, in whose profile the ix-confinement did not > work, was in fact not the executable, but a symlink to it, which I > didn't directly notice. While htop will then note the process via its > *executed*

Re: [apparmor] Confinement inheritance with ix

2020-08-14 Thread Jonas Große Sundrup
On 2020-08-12, Jonas Große Sundrup wrote: > Or in other words: where is my mental model of AppArmor still > incorrect? After some further experimentation, I think I can now answer my own question here, if anyone observes a similar problem and happens to find my original mail: The executable in