aa-status doesn't display profile attachment
Bug #1453944 reported by
Christian Boltz
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
AppArmor |
New
|
Undecided
|
Unassigned |
Bug Description
profile /foo /bar { }
is a totally valid profile, but it's also (at least) confusing for an admin looking at aa-status, and might lead to a false sense of security.
aa-status should {additionally,only} read /sys/kernel/
I didn't check aa-unconfined, but expect the same issue there.
To post a comment you must log in.