Other systems AppArmor

-






apparmor represents 1 of several possible approaches problem of restricting actions installed software may take.


the selinux system takes approach similar apparmor. 1 important difference selinux identifies file system objects inode number instead of path. means, example, while file inaccessible may become accessible under apparmor when hard link created, selinux still deny access through newly created hard link, since underlying data referenced inode same.


selinux , apparmor differ in how administered , how integrate system.


isolation of processes can accomplished mechanisms virtualization; 1 laptop per child (olpc) project, example, sandboxes individual applications in lightweight vserver.


in 2007, simplified mandatory access control kernel introduced.


in 2009, new solution called tomoyo included in linux 2.6.30; apparmor, uses path-based access control.


availability

apparmor first used in immunix linux 1998–2003. @ time, apparmor known subdomain, reference ability security profile specific program segmented different domains, program can switch between dynamically. apparmor first made available in sles , opensuse , first enabled default in sles 10 , in opensuse 10.1.


in may 2005 novell acquired immunix , rebranded subdomain apparmor , began code cleaning , rewriting inclusion in linux kernel. 2005 september 2007, apparmor maintained novell. novell suse legal owner of trademarked name apparmor.


apparmor first ported/packaged ubuntu in april 2007. apparmor became default package starting in ubuntu 7.10, , came part of release of ubuntu 8.04, protecting cups default. of ubuntu 9.04 more items such mysql have installed profiles. apparmor hardening continued improve in ubuntu 9.10 ships profiles guest session, libvirt virtual machines, evince document viewer, , optional firefox profile.


apparmor integrated october 2010, 2.6.36 kernel release.


apparmor has been integrated synology s dsm 5.1 beta in 2014.








Comments

Post a Comment

Popular posts from this blog

CACHEbox ApplianSys

-
cachebox230 server appliance cachebox s caching engine employs code squid project. in 2005 launched becta approved protex content filtering service in collaboration east of england broadband network, represent more 2800 schools across 10 authorities. in 2006, acquired assets , customer base of rival freedom2. has since expanded activity north american schools market , caching device requested schools 2015 e-rate funding.
Read more

Kinship systems Apache

-
hide painting depicting apache girl s puberty ceremony, naiche (chiricahua apache), ca. 1900, oklahoma history center the chiricahua language has 4 different words grandparent: -chú maternal grandmother , -tsúyé maternal grandfather , -chʼiné paternal grandmother , -nálé paternal grandfather . additionally, grandparent s siblings identified same word; thus, 1 s maternal grandmother, 1 s maternal grandmother s sisters, , 1 s maternal grandmother s brothers called -chú. furthermore, grandparent terms reciprocal, is, grandparent use same term refer grandchild in relationship. example, person s maternal grandmother called -chú , maternal grandmother call person -chú (i.e. -chú can mean child of either own daughter or sibling s daughter.) chiricahua cousins not distinguished siblings through kinship terms. thus, same word refer either sibling or cousin (there not separate terms parallel-cousin , cross-cousin). additionally, terms used according sex of speaker (unlike english terms broth...
Read more

Western Apache Apache

-
a western apache woman san carlos group western apache include northern tonto, southern tonto, cibecue, white mountain , san carlos groups. while these subgroups spoke same language , had kinship ties, western apaches considered separate each other, according goodwin. other writers have used term refer non-navajo apachean peoples living west of rio grande (thus failing distinguish chiricahua other apacheans). goodwin s formulation: apache peoples have lived within present boundaries of state of arizona during historic times exception of chiricahua, warm springs, , allied apache, , small band of apaches known apache mansos, lived in vicinity of tucson. cibecue western apache group, according goodwin, north of salt river between tonto , white mountain apache, consisting of ceder creek, carrizo, , cibecue (proper) bands. san carlos. western apache group ranged closest tucson according goodwin. group consisted of apache peaks, arivaipa, pinal, san carlos (proper) bands. arivaipa (also ara...
Read more