mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update AppArmorInterfaces

John Johansen 2019-03-01 22:21:31 +00:00
parent d211e3c5d8
commit 135ba0de25
1 changed files with 7 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
AppArmorInterfaces.md

@ -60,10 +60,15 @@ file interface which contains 1 security context per line in the file.
The aa\_splitcon()???ref?? api is aware of trailing '\\n' characters
and will remove them.
/proc/\<pid\>/attr/
/proc/\<pid\>/attr/ && /proc/\<pid\>/attr/apparmor/ && /sys/kernel/security/apparmor/attr
=================
reading /proc/\<pid\>/attr/ files
The files in /proc/\<pid\>/attr/ are virtualized in LSM stacking kernels, and will display the values for the current display LSM. There are two alternatives for these kernels. The apparmor subdirectory in /proc/\<pid\>/attr/ contains the same files as the /proc/\<pid\>/attr/ directory, but is not virtualized and will only display apparmor attributes.
The /sys/kernel/security/apparmor/attr/ directory contains the same files as /proc/current/attr/apparmor/ meaning only the current tasks attributes can be accessed via this method.
reading /proc/\<pid\>/attr/\* files
-------------------------------
The following apparmor interfaces can be read to obtain security context information about a task.