Re: [RFC][PATCH 0/11] security: AppArmor - Overview

From: Seth Arnold
Date: Tue Apr 25 2006 - 15:27:25 EST


On Mon, Apr 24, 2006 at 09:14:58AM +0200, Arjan van de Ven wrote:
> does apparmor at least (offer) to kill the app when this happens?
> (rationale: the app is hijacked, better kill it before it goes to do
> damage)

We have considered offering a "kill the process on failure" configuration
option; we certainly wouldn't want to force it on people, who might
simply be stopping their application from doing something annoying.

However, the code as currently posted, does not offer this feature.

Thanks for the suggestion

Attachment: pgp00000.pgp
Description: PGP signature