AppArmor

on YouTube ↗17m

" summary

AppArmor moves from bzr to git, speeds parallel compiles, and releases 2.10 with 2.11 betas while most work focuses on upstreaming a large patch set. Policy namespace stacking lands and runs in Ubuntu so tasks can be confined by intersecting profiles across container boundaries, but full virtualized policy directories and some LSM hooks remain unfinished. A group-change profile prototype for thread groups exists but is unused. A gsettings daemon replaces unsafe mmap access; LXD and Snappy integrations are ongoing.

AI-written summary · about

" chapters (7)

1. 0:00Intro
2. 0:30Development
3. 4:06GSettings
4. 6:20Namespaces
5. 11:10Stacking
6. 13:38LxD
7. 16:21Backlog

" related talks

• 29mOverview and Recent Developments: AppArmorJohn Johansen · Linux Security Summit Europe 2018
• 39mAppArmor UpdateJohn Johansen · Linux Security Summit Europe 2025
• 09mSub-system Update: AppArmor Update 2018John Johansen · Linux Security Summit North America 2018
• 07mSubsystem Update: AppArmor Update 2019John Johansen · Linux Security Summit North America 2019
• 50mImproving Unmodified Classic Application ConfinementJohn Johansen, Georgia Garcia · Linux Security Summit Europe 2022
• 48mUnprivileged Access Control in AppArmorJohn Johansen, Georgia Garcia · Linux Security Summit North America 2024
• 33mBuilding the Largest Working Set of Apparmor ProfilesAlexandre Pujol · Linux Security Summit North America 2023
• 01h 14mLSM Updates: IMA, SELinux, AppArmor, SMACK &...KP Singh, Roberto Sassu, Paul Moore, John Johansen · Linux Security Summit Europe 2023