[apparmor] aa_getcon

Jeroen Ooms jeroen.ooms at stat.ucla.edu
Wed Jul 18 09:59:28 UTC 2012


> yes, the profile needs access to the interface.  Currently the language
> does not have a shorthand for this so use
>
>   @{PROC}/[0-9]*/attr/current r,


Thanks I got it to work. Is this in any way a security risk, or is it
quite harmless to add this line? Eg it cannot be used to read a hat's
magic-token right?



More information about the AppArmor mailing list