mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-30 13:58:22 +00:00
- Update notes.
This commit is contained in:
@@ -8,5 +8,7 @@ inode_setattr hook
|
|||||||
|
|
||||||
* AppArmor should check for ATTR_FORCE in its inode_setattr hook,
|
* AppArmor should check for ATTR_FORCE in its inode_setattr hook,
|
||||||
and should not log or deny ATTR_FORCE setattrs. SELinux does
|
and should not log or deny ATTR_FORCE setattrs. SELinux does
|
||||||
that already as well.
|
that already as well. (For private inodes, the security_*
|
||||||
|
functions already skip the lsm hooks though, so this may be
|
||||||
|
unnecessary.)
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user