Sub-system Update: AppArmor Update 2018

on YouTube ↗09m

" summary

Project migrates from Launchpad/MediaWiki to GitLab, earns a CII badge, and ships concrete kernel work: base socket mediation (4.17), support for secids and an IMA-based profile attachment flow that changes confinement based on measurement. Policy storage moves to a per-kernel policy cache with overlays so distros can preinstall kernel-specific policies. Work in progress includes fine-grained network mediation (iptables), early policy load rework so systemd can call libapparmor directly, better audit grouping/filtering, and plumbing for policy namespaces and delegation.

AI-written summary · about

" chapters (5)

1. 0:00Start
2. 0:06New Logo
3. 1:28Cii Best Practice Badge
4. 2:40Base Socket Mediation
5. 6:01Per Kernel Policy Cache

" related talks

• 29mOverview and Recent Developments: AppArmorJohn Johansen · Linux Security Summit Europe 2018
• 39mAppArmor UpdateJohn Johansen · Linux Security Summit Europe 2025
• 17mAppArmorJohn Johansen · Linux Security Summit 2016
• 07mSubsystem Update: AppArmor Update 2019John Johansen · Linux Security Summit North America 2019
• 01h 14mLSM Updates: IMA, SELinux, AppArmor, SMACK &...KP Singh, Roberto Sassu, Paul Moore, John Johansen · Linux Security Summit Europe 2023
• 50mImproving Unmodified Classic Application ConfinementJohn Johansen, Georgia Garcia · Linux Security Summit Europe 2022
• 11mSubsystem Update: State of SELinux, 2019Paul Moore · Linux Security Summit North America 2019
• 35mCrackAppArmor RetrospectiveJohn Johansen · Linux Security Summit North America 2026