lkml.org 
[lkml]   [2007]   [Nov]   [10]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: AppArmor Security Goal
    * Crispin Cowan (crispin@crispincowan.com) wrote:

    <snip>

    > * Manipulating AppArmor policy requires being both root privileged
    > and not being confined by AppArmor, thus there is explicitly no
    > capability for non-privileged users to change AppArmor policy.

    It's a pity that there is no way to do this; it would be nice to restrict
    web browsers, document editors etc but allow them
    to access the places you commonly store documents etc.

    Similarly I'd like to be able to split applications so that
    the 'preferences' editing facilities are done by separate
    envrionments so that there is no way that a fault in parsing
    external data could edit the config (e.g. change home page or
    proxy in a browser or default document in an editor).

    Dave
    --
    -----Open up your eyes, open up your mind, open up your code -------
    / Dr. David Alan Gilbert | Running GNU/Linux on Alpha,68K| Happy \
    \ gro.gilbert @ treblig.org | MIPS,x86,ARM,SPARC,PPC & HPPA | In Hex /
    \ _________________________|_____ http://www.treblig.org |_______/
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2007-11-10 23:39    [W:4.304 / U:1.024 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site