Messages in this thread | | | Date | Wed, 19 Apr 2006 19:21:52 -0400 (EDT) | From | Rik van Riel <> | Subject | Re: [RFC][PATCH 4/11] security: AppArmor - Core access controls |
| |
On Wed, 19 Apr 2006, Seth Arnold wrote: > On Wed, Apr 19, 2006 at 07:05:08PM -0400, Rik van Riel wrote: > > Are confined processes always restricted from starting > > non-confined processes? > > It is specified in policy via an unconstrained execution flag: 'ux'. Any > unconfined children can of course do whatever they wish.
And the default is for the children to inherit the security policy from the parent process, like in SELinux ?
How do apparmor and selinux differ in how they contain bad things?
-- All Rights Reversed - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |