[apparmor] Help needed - Apparmor usage

[harshad wadkar]

My information :
Name : Harshad Wadkar
Student : PhD student
Area of Interest : Browser security, Operating system security.

Sir,

1)
I am trying to solve a problem wherein I would like to give (read, write)
access to file X, if it is accessed by only application Y and again if the
application Y is invoked by root user.

I do not want file X can be accessed (read, write, delete etc) using
application Z - even if Z is invoked by root user.


2)
is there any firefox profile for Apparmor available?

I have gone through the documentation of Apparmor, seccomp etc. But not
able to find solution to the problem I am trying to solve.

If you can suggest me a tool or api or library that will help me to solve
my problem, it will be great.

Your guidance is vital to me. Waiting for your reply.

I apologize for the disturbance.

Thanks & Regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20171209/a21b9765/attachment-0001.html>