mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-30 13:58:22 +00:00
Code Issues Releases Wiki Activity

Update EnvironmentVariables

John Johansen
2020-05-25 07:47:25 +00:00
parent 23f06c3ecf
commit 2b17d137b6
1 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
EnvironmentVariables.md

@@ -1,5 +1,15 @@
# Warning this document is a WIP
## to figure out
- default allow if no rules specified (ie no additional restrictions)
- if env rules present?
- default deny, white list. like rest of policy?
- default allow, black list
- anchoring? vs. contains
- how to identify subpattern in rule that should be filtered
# Introduction
Environment variables can be used to alter program behavior and have been leveraged to exploit programs. As such some environment variables are dangerous and must be handled carefully. AppArmor provides several ways to make sure the applications environment is safe