[apparmor] AppArmor stacking

[John Johansen]

On 01/25/2016 05:08 PM, Seth Arnold wrote:
> On Mon, Jan 25, 2016 at 04:46:29PM -0800, Seth Arnold wrote:
>> I thought our stacking discusssions might go better if we've got some
>> concrete examples of how stacking could be or will be used:
> 
> 5. An application wishes to confine its children at runtime, similar to
> seccomp2 bpf, except via an AppArmor profile that may be created and
> compiled on the fly.
> 
yeah, per application policy namespace falls into the same class as per
user, and certainly has its use.