lkml.org 
[lkml]   [2010]   [Jul]   [14]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Subject[AppArmor #5 0/13] AppArmor security module
Date
This is the fifth general posting of the newest version of the
AppArmor security module it has been rewritten to use the security_path
hooks instead of the previous vfs approach. The current implementation
is aimed at being as semantically close to previous versions of AppArmor
as possible while using the existing LSM infrastructure.

Development is on going and
improvements to file, capability, network, resource usage and ipc mediation
are planned.

With this submission we believe AppArmor is ready for inclusion into
the kernel.

_Issues NOT specifically addressed_
* The d_namespace_path function still manually strips the " (deleted)"
string that __d_path appends. A fix to __d_path is being pursued
independently of the AppArmor submission.

_Issues Addressed Since Last Time AppArmor was Posted_
* AppArmor auditing has been converted to use lsm_audit as suggested by
Eric Paris in
http://marc.info/?l=linux-security-module&m=125778105017307&w=2
* The user space interface CONFIG_APPARMOR_COMPAT_24 has not been removed,
as the replacement interface isn't ready yet. It will become a separate
patch that distros can carry to provide backwards compatibility.
* AppArmor's old network mediation has been removed and moved into
the compatibility patch. The new network mediation routines will
be submitted for review separate for the AppArmor base.
* all issues raised from last posting should be addressed.
* The code has seen more cleanup removing dead code. eg. // as null transition
* Several bug fixes have been applied

A Detailed list of all changes and patches are available from the AppArmor
git repository


The AppArmor project has recently transitioned away from Novell forge.
Code and Documentation can be found at the following locations
* Mailing List - apparmor@lists.ubuntu.com
* Documentation (wip) - http://apparmor.wiki.kernel.org/
* User space tools - https://launchpad.net/apparmor
* Kernel module -
git://git.kernel.org/pub/scm/linux/kernel/git/jj/apparmor-dev.git




\
 
 \ /
  Last update: 2010-07-15 02:47    [W:0.099 / U:0.272 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site