mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-30 13:58:22 +00:00
Code Issues Releases Wiki Activity

Update Apparmorearlypolicy

John Johansen
2018-07-28 02:17:53 +00:00
parent ac102db8a1
commit 473db4d699
1 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
Apparmorearlypolicy.md

@@ -9,6 +9,18 @@
= Introduction = = Introduction =
initrd initrd - allow setting profiles on init system and early processes
alternative early policy system alternative early policy system
- less rigorous but often sufficient
- easier to update policy
- early processes start unconfined
- replace early default profile with new profile shared by all tasks in the default profile
- requires init system to load policy early, should be before compilation and text policy are available
default profile
first load replace default profile, with new profile, all tasks confined by default confined by the new profile