mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update Apparmorpolicycache

John Johansen 2018-07-06 05:36:41 +00:00
parent 4d07bc5c94
commit 52a488bf59
1 changed files with 10 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
Apparmorpolicycache.md

@ -2,8 +2,17 @@ TOC
- [policy caching](Apparmorpolicycache)
- [binary policy](Apparmorbinarypolicy)
# AppArmor 2.x Binary policy cache
AppArmor compiles text policy into a binary binary policy that is then loaded into the kernel for enforcement. Before AppArmor 2.13 apparmor used a binary cache to store compiled policy so that the text policy would not have to be recompiled on every boot. However the cache had several limitations and issues.
single location
default to
managed in initscripts (ubuntu), parser.conf (upstream)
![image](/uploads/1e5a8be4dfebcf7e9566316c9d8651da/image.png)
![policy caching](img/policy_cache.svg)
policy cache