mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-08-23 02:27:12 +00:00
Code Issues Releases Wiki Activity

Update Release_Notes_4.0 alpha2

John Johansen 2023-07-02 02:31:48 +00:00
parent e4ad2a6ad9
commit d10b68158f
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
Release_Notes_4.0-alpha2.md

@ -33,8 +33,16 @@ wip - not in this alpha, not guaranteed to land in 4.0
- replace unconfined - replace unconfined
- mount, rename, hardlink restrictions, requires tracking - mount, rename, hardlink restrictions, requires tracking
- bpf
- ioctl - ioctl
- module - module
- ns tracking
- pivot root var
- deal with stacked attachment lookup
- optimize stacking name lookup to
- single buffer alloc
- single name lookup
- setns
- -
- audit control flags audit.mode=XXX - audit control flags audit.mode=XXX
- prompt, kill, unconfined - prompt, kill, unconfined
@ -45,6 +53,7 @@ wip - not in this alpha, not guaranteed to land in 4.0
- audit.mode flag control - audit.mode flag control
- allow all - allow all
- aa_load - aa_load
- drop root check
- sysv mqueue - sysv mqueue
- debug flags - debug flags
- io_uring - io_uring
@ -53,8 +62,18 @@ wip - not in this alpha, not guaranteed to land in 4.0
- improved rule prefixes - improved rule prefixes
- allow all - allow all
- policy overlays - policy overlays
- dfa merge in kernel
-
- extended xindex - extended xindex
- user conditional - user conditional
- policy
- attachment
- user mediation
- conditionals
- owner
- mac_override (for change_hat, hardlink, mv, bind mount)
- case insensite fs ???
-
- module mediation - module mediation
- boolean ops - boolean ops
- raw text in policy - raw text in policy