[apparmor] GSoC proposal text
John Johansen
john.johansen at canonical.com
Sat Mar 9 19:54:50 UTC 2013
Here is a first pass at a proposal to implement a new learning tool
for GSoC (Google Summer of Code)
Cross-distribution topic
AppArmor profile development tool
Description: The AppArmor project is a MAC like security extension for
Linux. Its policy is based around profiles that are used to define the
set of permission an application will be granted.
The project goal is to implement a new smarter profile development tool,
that is better at creating abstractions, and inter-profile policy analysis.
The base part of the project will be to implement a library and basic tool
using the library that can develop a profile from logs files, and basic user
interaction.
The remainder of the project will be to extend the base library and tool,
in any of several possible directions: doing inter-rule and inter-profile
static analysis, doing static analysis on applications to extract possible
rule patterns, or developing a better interface that will aid the user
in being able to find abstractions, and analyze inter-profile behavior.
Required knowledge: basic C, Python or Go, YCP (depenent on implementation route), some knowledge of Perl would be good but is not required
Skill Level: Intermediate - Hard (depends on implementation route)
Mentor: John Johansen, Christian Boltz
Student:
More information about the AppArmor
mailing list