This task was recommended as a TODO during the nvme-stas MIR review:
Original comment:
Since this is rather new (not brekaing many existing cases) but doing a
very special limited set of things (might be easy to describe) it might be
very helpful to consider writing apparmor profiles and/or using more of
the system service isolation features.
This task was recommended as a TODO during the nvme-stas MIR review:
Original comment:
Since this is rather new (not brekaing many existing cases) but doing a
very special limited set of things (might be easy to describe) it might be
very helpful to consider writing apparmor profiles and/or using more of
the system service isolation features.