WARNING this is an alpha - NOT released targeted to fall 2023

AppArmor 4.0-alpha was released 2023-07-11.

Introduction

AppArmor 4.0 is a major new release of the AppArmor that is in development, these are not complete release notes of everything in alpha1 but just highlighting new or important developments

Apprmor 4.0 is a bridge release between older AppArmor 3.x policy and the newer AppArmor 4 style policy which introduces several new features that are not backwards compatible. As such AppArmor 4.0 will be a short lived release, and will not receive long term support. The following AppArmor 4.1 feature release is planned to be a regular release, please take this into account when including AppArmor 4.0 into a distro release.

Some features will work with older kernels but many of the features in apparmor 4 with require a development kernel.

The kernel portion of the project is maintained and pushed separately.

AppArmor 4.0 contains all bug fixes and policy updates from apparmor 3.1

Obtaining the Release

This release can be obtained through gitlab.

gitlab

https://gitlab.com/apparmor/apparmor/-/releases/v4.0.0-alpha1

Highlighted new features in alpha1

New Profile Flag

New Mediation Rules

fine grain posix mqueue mediation
user ns mediation
io_uring mediation
- sqpoll and override_creds (cmd is still a wip)

utils

aa-status
- ability to filter output
aa-load
- new utility for loading binary (cache) policy without the parser, can be used by non-systemd systems to do cache loads.

parser

no longer require root permissions. Will still require privilege to load policy
improved rule merging before expr-simplification

Policy

update abi references to 4.0

misc

dbus-broker
- regression test integration