[PATCH 00/58] LSM: Module stacking for AppArmor

James Morris jmorris at namei.org
Wed Jun 5 22:28:30 UTC 2019


On Wed, 5 Jun 2019, John Johansen wrote:

> This does rely on apparmor doing its own namespacing and bounding. LSM
> stacking just allows us to start doing this with apparmor containers
> on smack and selinux based systems.

Ahh, ok, I thought you were using an LSM stack for each container.


-- 
James Morris
<jmorris at namei.org>



More information about the Linux-security-module-archive mailing list