Security policy for Sys V message queues

Jamie Strandboge jamie at canonical.com
Thu Nov 12 15:16:37 UTC 2015


On 11/12/2015 08:00 AM, Darren Landoll wrote:
> The application I'm trying to port over to Snappy still uses the old
> Sys V message queues for IPC. Should that work with the default
> apparmor security policy or is there something special I may need to
> change? From the testing I've done so far it appears that the msgget
> and msgrcv might be working, but not sure about msgsend.
> 
AppArmor policy shouldn't be an issue, and we allow these in the default seccomp
policy:

msgctl
msgget
msgrcv
msgsnd

-- 
Jamie Strandboge                 http://www.ubuntu.com/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/snappy-app-devel/attachments/20151112/c2f42a74/attachment.pgp>


More information about the snappy-app-devel mailing list