[apparmor] GSoC proposal text

John Johansen john.johansen at canonical.com
Sat Mar 9 19:54:50 UTC 2013


Here is a first pass at a proposal to implement a new learning tool
for GSoC (Google Summer of Code)

Cross-distribution topic

AppArmor profile development tool

Description: The AppArmor project is a MAC like security extension for
Linux. Its policy is based around profiles that are used to define the
set of permission an application will be granted.

The project goal is to implement a new smarter profile development tool,
that is better at creating abstractions, and inter-profile policy analysis.

The base part of the project will be to implement a library and basic tool
using the library that can develop a profile from logs files, and basic user
interaction.

The remainder of the project will be to extend the base library and tool,
in any of several possible directions: doing inter-rule and inter-profile
static analysis, doing static analysis on applications to extract possible
rule patterns, or developing a better interface that will aid the user
in being able to find abstractions, and analyze inter-profile behavior.

Required knowledge: basic C, Python or Go, YCP (depenent on implementation route), some knowledge of Perl would be good but is not required

Skill Level: Intermediate - Hard (depends on implementation route)

Mentor: John Johansen, Christian Boltz

Student:



More information about the AppArmor mailing list