[Bug 1501966] Re: support changing Apparmor hats

John Johansen john.johansen at canonical.com
Fri Oct 2 11:33:41 UTC 2015


The Immunix openssh patch for subdomain (apparmor before it was
apparmor)

** Patch added: "openssh-3.8p1-subdomain-privsep-v3.patch"
   https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1501966/+attachment/4481853/+files/openssh-3.8p1-subdomain-privsep-v3.patch

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1501966

Title:
  support changing Apparmor hats

Status in openssh package in Ubuntu:
  New

Bug description:
  Some older versions of OpenSSH had a patch allowing the daemon to
  change Apparmor hats to apply different containment profiles to
  different code paths (AUTHENTICATED, EXEC, PRIVSEP, etc).

  This feature would need to be ported to recent OpenSSH versions and
  sent upstream for inclusion in the portable branch.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1501966/+subscriptions



More information about the foundations-bugs mailing list