Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

    2024-01-08 22:34 ubuntu@knope:~$ sudo apparmor_status
    apparmor module is loaded.
    185 profiles are loaded.
    104 profiles are in enforce mode.
    (...)
    124 processes have profiles defined.
    122 processes are in enforce mode.

including firefox and chromium


But apparmor is more complex system and in fact is an RBAC. unveil(2) is much more easier in implementation and enforcing.




Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: