[apparmor] ImHex pattern for binary AppArmor profiles

Zygmunt Krynicki me at zygoon.pl
Mon Jan 6 14:31:55 UTC 2025


Hi

Over holiday break I was using ImHex editor to look at binary AppArmor 
profiles. I've published the ImHex pattern language describing the outer 
little-endian envelope to my GitLab organization [1].

The pattern is pretty rough as I was exploring how to use ImHex to both 
parse the data correctly _and_ render it in useful ways for humans to 
read and analyze.

I'm trying to parse the inner big-endian data set but I'm exploring 
imhex memory sections feature to make that work in a readable manner.

In any case, I'm happy to share and welcome any feedback.
Thanks!

ZK

[1] https://gitlab.com/zygoon/apparmor-binary/




More information about the AppArmor mailing list