-
*For more context, see https://apparmor.pujol.io/development/internal/#re-attached-path*
AppAmor 4.0 provides the `attach_disconnect.path` flag allowing to reattach this path to a prefix that is no…
-
#### What would you like to be added:
It would be nice to extend the spoc CLI to install apparmor profiles into the local system. The CLI is able to record apparmor profiles either as YAML def…
-
#### What would you like to be added:
The ApparmorProfile CRD should be cluster-wide scope, and not namespaced. I would argue that also SeccompProfile should be the same.
The Profile CRDs …
-
There is no option to import photos from the SD card that's mounted on my system. Here are more details about my setup:
- Ubuntu 24.04.1 LTS (Noble Numbat)
- Darktable installed from `snap` (tried b…
-
I would like to apply the `/etc/apparmor.d/enroot` that is found on the `kind` host to the worker nodes. I can see that from a worker node that `/sys/module/apparmor/parameters/enabled` is set to `Y` …
mbana updated
3 months ago
-
**Description**
libvirtd on the hypervisor restarts every 10 minutes under the user 'oneadmin,' while there is already a process running under the root user.
```
root 8590 0.6 0.0 1632864 47432 ? Ssl…
-
**Steps to reproduce**
Run this shell command:
vim -Nu NONE --cmd 'filetype on' +'echomsg &filetype' /etc/apparmor.d/usr.bin.man
`man` is echo'ed (and the file is highlighted as a manpage…
-
It would be interesting to see if we can auto-apply AppArmor profiles if we are running as a privileged user (after all, we are only ever going to be modifying files inside the unpack directory and th…
-
**Is your feature request related to a problem? Please describe**.
Improve zero day exploit protections for containers running untrusted code
**Describe the solution you'd like**.
Ability t…
-
I drafted an AppArmor profile for Bisq https://github.com/komachi/apparmor-even-more-profiles/blob/master/profiles/opt.Bisq.Bisq
It works for me on debian stable. I propose shipping an AppArmor pro…