mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-04 08:24:42 +01:00
![]() Found in testing a slimmed-down `usr.sbin.sshd` profile: ``` Jun 8 21:09:38 testvm kernel: [ 54.847014] audit: type=1400 audit(1686272978.009:68): apparmor="DENIED" operation="open" profile="/usr/sbin/sshd" name="/sys/kernel/mm/transparent_hugepage/hpage_pmd_size" pid=1035 comm="sshd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 ``` Not sure what glibc/system call uses this, but it seems pretty broadly applicable, and read access is presumably harmless. [THP reference](https://www.kernel.org/doc/html/latest/admin-guide/mm/transhuge.html) MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1050 Approved-by: John Johansen <john@jjmx.net> Merged-by: John Johansen <john@jjmx.net> |
||
---|---|---|
.. | ||
apparmor/profiles/extras | ||
apparmor.d | ||
Makefile |