[apparmor] loading a user version of a profile in place of the system profile
John Johansen
john.johansen at canonical.com
Sat Jan 29 23:52:14 UTC 2022
On 1/29/22 14:48, John Johansen wrote:
> On 1/29/22 05:18, me at beroal.in.ua wrote:
>> Hi. Will it be announced on this mailing list when the user policy feature has landed? I'm interested too. I didn't even know that ordinary users may create their own profiles.
>>
> Yes it will get announced, in release announcements that go to the mailing list, web site, and twitter. At the moment ordinary users can't but that is the goal. It will be controlled (so system will have to be configured to allow it) and will be stacked with system policy so both will be enforced at the same time. Obviously it won't allow overriding or bypassing system policy.
>
To be clear, this is a wip and there is still a lot of work to be done before this can land. It will be rolled out in phases, where its first release will be fairly bare bones, and probably not for general consumption (think of it as a preview).
More information about the AppArmor
mailing list