Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

AppArmor: Support for loading a pre-compiled profile #15905

Merged
merged 1 commit into from Jun 9, 2020
Merged

AppArmor: Support for loading a pre-compiled profile #15905

merged 1 commit into from Jun 9, 2020

Commits on Jun 3, 2020

  1. AppArmor: Support for loading a set of pre-compiled profiles at start…

    …up time
    
    Let systemd load a set of pre-compiled AppArmor profile files from a policy
    cache at /etc/apparmor/earlypolicy. Maintenance of that policy cache must be
    done outside of systemd.
    
    After successfully loading the profiles systemd will attempt to change to a
    profile named systemd.
    
    If systemd is already confined in a profile, it will not load any profile files
    and will not attempt to change it's profile.
    
    If anything goes wrong, systemd will only log failures. It will not fail to
    start.
    YmrDtnJu committed Jun 3, 2020
    Configuration menu
    Copy the full SHA
    8ca9b16 View commit details
    Browse the repository at this point in the history