mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update unprivileged_unconfined_restriction

John Johansen 2023-12-29 08:46:17 +00:00
parent a2e8216983
commit a683115aa5
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
unprivileged_unconfined_restriction.md

@ -1,5 +1,5 @@
Similar to the unprivileged unconfined [user namespace restrictions](https://gitlab.com/apparmor/apparmor/-/wikis/unprivileged_userns_restriction), unprivileged unconfined has had been restricted in other ways. These restrictions help protect the system and ensure policy is being enforced as design.
Similar to the unprivileged unconfined [user namespace restrictions](https://gitlab.com/apparmor/apparmor/-/wikis/unprivileged_userns_restriction), unprivileged unconfined has had been restricted in other ways. These restrictions help protect the system and ensure policy is being enforced as designed.
The set of restrictions applied to unprivileged unconfined will evolve over time. In fact the intent is to eventually make the set of restrictions customizable by making it possible to replace the unconfined profile. With that said the default unconfined profile will provide a base set of restrictions that can be disabled by either using a kernel boot parameter and/or a sysctl.