Here's the patch to the AppArmor regression tests that add fairly comprehensive tests for pivot_root mediation. What is missing from the patch is testing audit and deny modifiers on pivot_root rules. I'll add those before I upstream the patch.
Here's the patch to the AppArmor regression tests that add fairly comprehensive tests for pivot_root mediation. What is missing from the patch is testing audit and deny modifiers on pivot_root rules. I'll add those before I upstream the patch.