~/talk

Overview and Recent Developments: AppArmor

on YouTube 29m
Talkat Linux Security Summit Europe 2018 · on Friday, 2018-10-26· at 11:35· Moorfoot· [security, linux-and-operating-systems]

speaker

name:John Johansen
links:none on file

resources

video:https://youtu.be/3MkU_Z-fClE
slides:none on file

summary

Project moves to GitLab, picks up CII badge and new logo; upstreaming finishes most patches except AF_UNIX. AppArmor remains a path-based, modified DTE with early EVM/xattr work and a new secids kernel interface plus socket mediation (coarse-grained). Policy namespaces plus policy stacking implement intersectional restrictions useful for containers (LXD/Ubuntu), with ABI pinning, per-kernel cache for compiled state machines, and partial support for no_new_privs transitions; fine-grained network and mount mediation remain work in progress.

AI-written summary · about

chapters (10)

  1. 0:00Start
  2. 0:51Cii Best Practices Badge
  3. 3:35Design Goals
  4. 4:52Unconfined Mode
  5. 10:14User Space Trusted Helpers
  6. 11:12Policy Namespaces
  7. 14:16Policy Stacking
  8. 22:08Socket Meaning Mediation
  9. 22:43Profile Attachments
  10. 26:23Overlay Support for Policy in Cash

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.