[apparmor] ImHex pattern for binary AppArmor profiles
Zygmunt Krynicki
me at zygoon.pl
Mon Jan 6 14:31:55 UTC 2025
Hi
Over holiday break I was using ImHex editor to look at binary AppArmor
profiles. I've published the ImHex pattern language describing the outer
little-endian envelope to my GitLab organization [1].
The pattern is pretty rough as I was exploring how to use ImHex to both
parse the data correctly _and_ render it in useful ways for humans to
read and analyze.
I'm trying to parse the inner big-endian data set but I'm exploring
imhex memory sections feature to make that work in a readable manner.
In any case, I'm happy to share and welcome any feedback.
Thanks!
ZK
[1] https://gitlab.com/zygoon/apparmor-binary/
More information about the AppArmor
mailing list