@anonymouse67 the fix is userspace only, so it should work with any kernel that currently supports unix socket mediation.
The fix might be distro backported to versions other than 2.12.5 etc. The regular distro vs. upstream version issue. Its possible to check if a parser supports it by feeding it a stub profile.
```
/f { unix (bind) addr=auto, }
```
But ideally I think the solution is snap vendoring apparmor userspace, so you don't have to worry about what the distro is carrying. Alex is working on this, he has a vendored 3.0.1 demo (I think there still is some more tweaking to do).
@anonymouse67 the fix is userspace only, so it should work with any kernel that currently supports unix socket mediation.
The fix might be distro backported to versions other than 2.12.5 etc. The regular distro vs. upstream version issue. Its possible to check if a parser supports it by feeding it a stub profile.
```
/f { unix (bind) addr=auto, }
```
But ideally I think the solution is snap vendoring apparmor userspace, so you don't have to worry about what the distro is carrying. Alex is working on this, he has a vendored 3.0.1 demo (I think there still is some more tweaking to do).