3a2dc8382a
2.6.36 introduced the abilitiy to specify the task that is having its rlimits set. Update mediation to ensure that confined tasks can only set their own group_leader as expected by current policy. Add TODO note about extending policy to support setting other tasks rlimits. Signed-off-by: John Johansen <john.johansen@canonical.com> Signed-off-by: James Morris <jmorris@namei.org> |
||
---|---|---|
.. | ||
apparmor.h | ||
apparmorfs.h | ||
audit.h | ||
capability.h | ||
context.h | ||
domain.h | ||
file.h | ||
ipc.h | ||
match.h | ||
path.h | ||
policy.h | ||
policy_unpack.h | ||
procattr.h | ||
resource.h | ||
sid.h |