[apparmor] Question about file_mmap/exec in the case of perl/shell scripts

Seth Arnold seth.arnold at canonical.com
Tue Sep 17 12:53:27 UTC 2019


On Thu, Sep 12, 2019 at 04:20:22PM +0200, Mikhail Morfikov wrote:
> Shouldn't be here some "x" or "m" permissions, or maybe AppArmor assumes 
> this automatically for the confined path, so it's redundant to specify it 
> manually?

Interpreters are handled differently:

https://bugs.launchpad.net/apparmor/+bug/1346553

I'm not sure if we'll be able to change this behaviour in the future or
not.

Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20190917/b0699b7b/attachment.sig>


More information about the AppArmor mailing list