Re: [PATCH] security_apparmor: store dynamically generated rules

2024-11-12 Thread Georgia Garcia
Hi Peter, On Mon, 2024-11-11 at 09:48 +0100, Peter Krempa wrote: > On Fri, Nov 08, 2024 at 15:58:35 -0300, Georgia Garcia wrote: > > Some rules are generated dynamically during boot and added to the > > AppArmor policy. An example of that is macvtap devices that call the > > AppArmorSetFDLabel hoo

Re: [PATCH] security_apparmor: store dynamically generated rules

2024-11-11 Thread Peter Krempa
On Fri, Nov 08, 2024 at 15:58:35 -0300, Georgia Garcia wrote: > Some rules are generated dynamically during boot and added to the > AppArmor policy. An example of that is macvtap devices that call the > AppArmorSetFDLabel hook to add a rule for the tap device path. > > Since this information is dy

[PATCH] security_apparmor: store dynamically generated rules

2024-11-08 Thread Georgia Garcia
Some rules are generated dynamically during boot and added to the AppArmor policy. An example of that is macvtap devices that call the AppArmorSetFDLabel hook to add a rule for the tap device path. Since this information is dynamic, it is not available in the xml config, therefore whenever a "Rest