Re: [AppArmor 01/41] Pass struct vfsmount to the inode_create LSM hook

James Morris
2007-05-26T18:41:36Z

On Fri, 25 May 2007, Crispin Cowan wrote:

> Finally, AA doesn't care what the contents of the executable are. We
> assume that it is a copy of metasploit or something, and confine it to
> access only the resources that the policy says.

As long as these resources are only files. There is no confinement beyond
that.

- James
--
James Morris
<jmorris@namei.org>