mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-22 18:17:09 +00:00
Create Release_Notes_4.0 alpha2
parent
3fd128d345
commit
ca11c5ef40
56
Release_Notes_4.0-alpha2.md
Normal file
56
Release_Notes_4.0-alpha2.md
Normal file
@ -0,0 +1,56 @@
|
|||||||
|
WARNING this is an alpha - NOT released targeted to fall 2023
|
||||||
|
================================================
|
||||||
|
|
||||||
|
AppArmor 4.0-alpha was released 2023-06-2??.
|
||||||
|
|
||||||
|
# Introduction
|
||||||
|
|
||||||
|
AppArmor 4.0 is a major new release of the AppArmor that is in development, these are not complete release notes of everything in alpha1 but just highlighting new or important developments
|
||||||
|
|
||||||
|
Apprmor 4.0 is a bridge release between older AppArmor 3.x policy and the newer AppArmor 4 style policy which introduces several new features that are not backwards compatible. As such AppArmor 4.0 will be a short lived release, and will not receive long term support. The following AppArmor 4.1 feature release is planned to be a regular release, please take this into account when including AppArmor 4.0 into a distro release.
|
||||||
|
|
||||||
|
Some features will work with older kernels but many of the features in apparmor 4 with require a development kernel.
|
||||||
|
|
||||||
|
The kernel portion of the project is maintained and pushed separately.
|
||||||
|
|
||||||
|
|
||||||
|
# Highlighted new features in alpha 2
|
||||||
|
|
||||||
|
##New Mediation Rules
|
||||||
|
|
||||||
|
##utils
|
||||||
|
|
||||||
|
## parser
|
||||||
|
|
||||||
|
## misc
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
wip - not in this alpha, not guaranteed to land in 4.0
|
||||||
|
- debug flags
|
||||||
|
- attach_disconnected.path
|
||||||
|
- unconfined profile flag
|
||||||
|
- audit.mode flag control
|
||||||
|
- allow all
|
||||||
|
- aa_load
|
||||||
|
- sysv mqueue
|
||||||
|
- debug flags
|
||||||
|
- io_uring
|
||||||
|
- revised af_unix
|
||||||
|
- fine grained ipv4/ipv6
|
||||||
|
- improved rule prefixes
|
||||||
|
- allow all
|
||||||
|
- policy overlays
|
||||||
|
- extended xindex
|
||||||
|
- user conditional
|
||||||
|
- module mediation
|
||||||
|
- boolean ops
|
||||||
|
- raw text in policy
|
||||||
|
- compressed cache
|
||||||
|
- policy hash
|
||||||
|
- kernel supports conditionals
|
||||||
|
- improved policy conditionals
|
||||||
|
- dominance fix
|
||||||
|
- fs specific mount option matching
|
||||||
|
-
|
Loading…
x
Reference in New Issue
Block a user