Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #59473

Re: recommends for apparmor in newest linux-image-4.13

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Thu, 2017-11-23 at 14:18 +0100, Christoph Hellwig wrote:
> Hi all,
> 
> is there any good reason for the recommends of apparmor in the latest
> linux packages?  apparomor is just one of many security modules, and
> a fairly bogus one to start with.  The kernel should not recommend it
> as it doesn't add at all to the expected kernel functionality.

AppArmor is the default LSM.

> The changelog suggests it was done that systemd units might use it,
> but in that case those systemd units should depend on apparmor.

They don't depend on AppArmor unless it's enabled.  Which is a decision
made in the kernel configuration (potentially overriden by the kernel
comamnd line).

Ben.

> And to start with there probably should be a policty that no unit
> file shall fail the boot for a missing security module (any of them).

-- 
Ben Hutchings
When in doubt, use brute force. - Ken Thompson

Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

recommends for apparmor in newest linux-image-4.13 Christoph Hellwig <hch@lst.de> - 2017-11-23 14:50 +0100
  Re: recommends for apparmor in newest linux-image-4.13 Ben Hutchings <ben@decadent.org.uk> - 2017-11-23 15:00 +0100
    Re: recommends for apparmor in newest linux-image-4.13 Ben Hutchings <ben@decadent.org.uk> - 2017-11-23 15:10 +0100
      Re: recommends for apparmor in newest linux-image-4.13 Christoph Hellwig <hch@lst.de> - 2017-11-23 15:20 +0100
        Re: recommends for apparmor in newest linux-image-4.13 Lars Wirzenius <liw@liw.fi> - 2017-11-23 16:10 +0100
          Re: recommends for apparmor in newest linux-image-4.13 Christoph Hellwig <hch@lst.de> - 2017-11-28 20:20 +0100
            Re: recommends for apparmor in newest linux-image-4.13 md@Linux.IT (Marco d'Itri) - 2017-11-29 00:50 +0100
              Re: recommends for apparmor in newest linux-image-4.13 Michael Stone <mstone@debian.org> - 2017-11-29 04:20 +0100
    Re: recommends for apparmor in newest linux-image-4.13 Christoph Hellwig <hch@lst.de> - 2017-11-23 15:20 +0100
  Re: recommends for apparmor in newest linux-image-4.13 Wouter Verhelst <wouter@debian.org> - 2017-11-23 15:10 +0100
    Re: recommends for apparmor in newest linux-image-4.13 maximilian attems <maks@stro.at> - 2017-11-23 16:40 +0100
      Re: recommends for apparmor in newest linux-image-4.13 Ian Jackson <ijackson@chiark.greenend.org.uk> - 2017-11-23 18:30 +0100

csiph-web