mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update apparmor_kernel_development_guide

John Johansen 2018-10-11 07:29:58 +00:00
parent 5691a45d26
commit 182e255b66
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
apparmor_kernel_development_guide.md

@ -215,7 +215,7 @@ The confining profile can transition to single profile, either the same or somet
When seccomp nnp is set, it affects what domain transitions can occur. Specifically exec time inheritance of the current profile is allowed but regular profile transitions are blocked. The only transition that is allowed is from ```unconfined``` to any profile as this always results in less privileges.
## post 4.13
## 4.13..4.16
AppArmor replaced the profile* stored in the task_ctx stored off the cred with a label*.
```task -> cred -> security (task_ctx *) -> label```