Skip to content
  • Christian Boltz's avatar
    Add abi rules to AppArmor profiles · 78ccf477
    Christian Boltz authored and Sandro Knauß's avatar Sandro Knauß committed
    This means that all AppArmor features / rule types will be enabled and
    enforced. Without an abi rule, some newer rule types (network, dbus
    etc.) won't be enforced and all access of this type will be
    allowed.
    
    Note that enforcing network, dbus etc. rules also requires at least
    AppArmor 3.0 userspace.
    
    The updated profiles will still work with older AppArmor userspace
    (which will ignore the abi rule).
    
    Tested on openSUSE Tumbleweed.
    78ccf477