mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-31 06:16:03 +00:00
Update apparmor_kernel_development_guide
@@ -204,9 +204,9 @@ view
|
||||
## post 4.13
|
||||
AppArmor replaced the profile* stored in the task_ctx stored off the cred with a label*. Domain transition now consist of building a new label. To do this we walk each profile in the cred label and they can each have a transition
|
||||
|
||||
A -> D
|
||||
B -> B
|
||||
C -> A&C
|
||||
| A -> D |
|
||||
| B -> B |
|
||||
| C -> A&C |
|
||||
|
||||
the transition is usually to a single profile (actually label of the profile) but it can be to a label
|
||||
stack, C -> A&C above. This allows setting up stacks etc.
|
||||
|
Reference in New Issue
Block a user