[apparmor] [patch 1/3] profiles: allow apache hats to receive signals from unconfined
Steve Beattie
steve at nxnw.org
Tue Jun 24 18:09:28 UTC 2014
On Fri, Jun 20, 2014 at 05:08:09PM -0500, Jamie Strandboge wrote:
> Hrmm, this was clearly an oversight on my part:
>
> [ Jamie Strandboge ]
> * debian/patches/update-base-abstraction-for-signals-and-ptrace.patch:
> Adjust the base abstraction for signals and ptrace mediation. Profiles
> that use the base abstraction can deny any of the granted permissions to
> achieve tighter confinement.
>
> I've taken a todo to post this to the list. Sorry...
No problem, thanks for pushing this.
In any event, there is clearly enough support for including it in
the apache2-common abstraction, so I went ahead and committed that
patch as well.
--
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20140624/60929d10/attachment.pgp>
More information about the AppArmor
mailing list