From 3fd128d34535231e45b793960a206d5ceadfb70d Mon Sep 17 00:00:00 2001 From: John Johansen Date: Fri, 30 Jun 2023 07:29:05 +0000 Subject: [PATCH] Update Release_Notes_4.0 alpha1 --- Release_Notes_4.0-alpha1.md | 21 ++++++++++++++++----- 1 file changed, 16 insertions(+), 5 deletions(-) diff --git a/Release_Notes_4.0-alpha1.md b/Release_Notes_4.0-alpha1.md index 606dd38..9e4cf7a 100644 --- a/Release_Notes_4.0-alpha1.md +++ b/Release_Notes_4.0-alpha1.md @@ -16,19 +16,30 @@ The kernel portion of the project is maintained and pushed separately. # Highlighted new features in alpha 1 --aa-status - - ability to filter output +##New Mediation Rules +- fine grain posix mqueue mediation +- user ns mediation +- io_uring mediation + - sqpoll and override_creds (cmd is still a wip) +##utils +- aa-status + - ability to filter output +- aa-load + - new utility for loading binary (cache) policy without the parser, can be used by non-systemd systems to do cache loads. + +## parser +- no longer require root permissions. Will still require privilege to load policy + +## misc dbus-broker - regression test integration -- fine grain posix mqueue - -- user ns mediation wip - not in this alpha, not guaranteed to land in 4.0 +- debug flags - attach_disconnected.path - unconfined profile flag - audit.mode flag control