passt/contrib/apparmor/usr.bin.pasta, branch 2023_03_21.1ee2f7c Plug A Simple Socket Transport contrib/apparmor: Merge pasta and passt profiles, update rules 2022-11-16T14:11:07+00:00 Stefano Brivio sbrivio@redhat.com 2022-11-14T22:56:52+00:00 fb7b71b86f5591cc4bf83fcf4081634f4c2980aa AppArmor resolves executable links before profile attachment rules are evaluated, so, as long as pasta is installed as a link to passt, there's no way to differentiate the two cases. Merge the two profiles and leave a TODO note behind, explaining two possible ways forward. Update the rules so that passt and pasta are actually usable, once the profile is installed. Most required changes are related to isolation and sandboxing features. Signed-off-by: Stefano Brivio <sbrivio@redhat.com> 
AppArmor resolves executable links before profile attachment rules
are evaluated, so, as long as pasta is installed as a link to passt,
there's no way to differentiate the two cases. Merge the two profiles
and leave a TODO note behind, explaining two possible ways forward.

Update the rules so that passt and pasta are actually usable, once
the profile is installed. Most required changes are related to
isolation and sandboxing features.

Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
passt, pasta: Add examples of AppArmor policies 2022-03-29T13:35:38+00:00 Stefano Brivio sbrivio@redhat.com 2022-03-27T19:58:11+00:00 e9d573b14f28bde604718513ed3d499f621090d8 These should cover any reasonably common use case in distributions. Signed-off-by: Stefano Brivio <sbrivio@redhat.com> 
These should cover any reasonably common use case in distributions.

Signed-off-by: Stefano Brivio <sbrivio@redhat.com>