mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update AppArmorTrustedHelpers

John Johansen 2018-06-12 07:37:26 +00:00
parent 6ec5523d8b
commit 4467b6b4e8
1 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
AppArmorTrustedHelpers.md

@ -22,12 +22,19 @@ External Policy Blob
Trusted helpers need to deal with dynamic policy
## Dynamic includes
Handling policy external to apparmor means having to handle dynamic policy computations
## Dynamic Includes
dynamic includes can be used to extend a profile without having to replace an entire profile.
They allow for a Trusted helper a controlled way to provide partial policy for a profile without needing the authority to replace/update a profile.
## Stacking
Used by Launchers and containers
## Delegation
### Object (FD) Delegation
### Rule Delegation
@ -47,6 +54,8 @@ Pulling policy from the kernel for independent policy
policy notifications
# Namespace scopes and views
can be used to control access
# Example Trusted helpers