Subsystem Update: AppArmor Update 2019

on YouTube ↗07m

" summary

AppArmor reports concrete engineering work: moved to unit tests with KUnit and added a primer E2E project that found kernel bugs, refactored the matching engine and verifier checks, and removed decades-old cruft. New user-space FD API for container use and checkpoint data compression reduce memory on large systems. Planned features include safe unprivileged per-task policies composed with system policy, EVM-based profile attachment fixes, and RFS and audit improvements for containers.

AI-written summary · about

" chapters (5)

1. 0:00Start
2. 2:16Attachment Conflict Resolution
3. 3:05Compiler Performance
4. 4:26Unprivileged Policy
5. 6:19Audit Improvements

" related talks

• 39mAppArmor UpdateJohn Johansen · Linux Security Summit Europe 2025
• 29mOverview and Recent Developments: AppArmorJohn Johansen · Linux Security Summit Europe 2018
• 09mSub-system Update: AppArmor Update 2018John Johansen · Linux Security Summit North America 2018
• 17mAppArmorJohn Johansen · Linux Security Summit 2016
• 01h 14mLSM Updates: IMA, SELinux, AppArmor, SMACK &...KP Singh, Roberto Sassu, Paul Moore, John Johansen · Linux Security Summit Europe 2023
• 16mSub-system Update: Linux Integrity Status UpdateMimi Zohar · Linux Security Summit North America 2018
• 50mImproving Unmodified Classic Application ConfinementJohn Johansen, Georgia Garcia · Linux Security Summit Europe 2022
• 35mCrackAppArmor RetrospectiveJohn Johansen · Linux Security Summit North America 2026