08 Sep, 2010
1 commit
-
2.6.36 introduced the abilitiy to specify the task that is having its
rlimits set. Update mediation to ensure that confined tasks can only
set their own group_leader as expected by current policy.Add TODO note about extending policy to support setting other tasks
rlimits.Signed-off-by: John Johansen
Signed-off-by: James Morris
02 Aug, 2010
1 commit
-
ipc:
AppArmor ipc is currently limited to mediation done by file mediation
and basic ptrace tests. Improved mediation is a wip.rlimits:
AppArmor provides basic abilities to set and control rlimits at
a per profile level. Only resources specified in a profile are controled
or set. AppArmor rules set the hard limit to a value
Signed-off-by: James Morris