INFRA Signal 100
Linux 7.3 AppArmor gains user-space compressed policy loading
↗
Illustration only Photo by Tyler on Unsplash
AppArmor improvements merged into Linux 7.3 add the ability to load user-space compressed policies to this kernel security module that provides per-program application security controls around system resources.
Compressed policy support reduces the storage and transfer footprint of AppArmor configurations, which matters for fleet deployment and constrained environments. Shifting decompression to user space also keeps the kernel's responsibility limited to enforcement rather than format parsing.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
AppArmor improvements have been merged for the Linux 7.3 kernel cycle.
The most notable addition is support for loading user-space compressed policies.
AppArmor provides per-program Linux application security controls around system resources.
THE CLUSTER