[apparmor] [patch 1/3] profiles: allow apache hats to receive signals from unconfined

Steve Beattie steve at nxnw.org
Tue Jun 24 18:09:28 UTC 2014


On Fri, Jun 20, 2014 at 05:08:09PM -0500, Jamie Strandboge wrote:
> Hrmm, this was clearly an oversight on my part:
> 
>   [ Jamie Strandboge ]
>   * debian/patches/update-base-abstraction-for-signals-and-ptrace.patch:
>     Adjust the base abstraction for signals and ptrace mediation. Profiles
>     that use the base abstraction can deny any of the granted permissions to
>     achieve tighter confinement.
> 
> I've taken a todo to post this to the list. Sorry...

No problem, thanks for pushing this.

In any event, there is clearly enough support for including it in
the apache2-common abstraction, so I went ahead and committed that
patch as well.

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20140624/60929d10/attachment.pgp>


More information about the AppArmor mailing list