Eric Windisch 7342d59114 AppArmor: Deny w to /proc/* files ...

Introduce a write denial for files at the root of /proc.

This prohibits root users from performing a chmod of those
files. The rules for denials in proc are also cleaned up,
making the rules better match their targets.

Locally tested on:
- Ubuntu precise (12.04) with AppArmor 2.7
- Ubuntu trusty (14.04) with AppArmor 2.8.95

Signed-off-by: Eric Windisch <eric@windisch.us>

2015-08-13 15:39:25 -04:00

2.8 KiB

Raw Blame History

View Raw