diff --git a/AppArmorObjectDelegation.md b/AppArmorObjectDelegation.md index 287da23..5143a6a 100644 --- a/AppArmorObjectDelegation.md +++ b/AppArmorObjectDelegation.md @@ -29,7 +29,7 @@ Delegation of Authority via objects is a way to limit delegation to objects (fil Object delegation can often be more selective and aligns with existing apis. ???Object delegation has similarities -In AppArmor object delegation can be further divided into [Policy directed delegation]() and Application directed delegation. Policy directed delegation allows policy to declare that certain objects should can be delegated on behalf of the application, while application directed delegation requires the application to interact with apparmor to invoke delegation. +In AppArmor object delegation can be further divided into [Policy directed delegation]() and Application directed delegation. Both policy and application directed require policy rules but policy directed delegation allows policy to declare that certain objects should can be delegated on behalf of the application, while application directed delegation policy specifies what an application can delegate through the api. # Policy directed delegation (inheritance)