Messages in this thread |  | | | Date | Wed, 19 Apr 2006 16:18:31 -0700 | | From | Seth Arnold <> | | Subject | Re: [RFC][PATCH 4/11] security: AppArmor - Core access controls | |
On Wed, Apr 19, 2006 at 07:05:08PM -0400, Rik van Riel wrote:
> Are confined processes always restricted from starting
> non-confined processes?
It is specified in policy via an unconstrained execution flag: 'ux'. Any
unconfined children can of course do whatever they wish.
[unhandled content-type:application/pgp-signature] |  |