touch-packages team mailing list archive

[Jamie Strandboge <jamie@xxxxxxxxxx>]

** Changed in: apparmor (Ubuntu)
       Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1373555

Title:
  please restrict signal, ptrace and unix mediation to the container

Status in “apparmor” package in Ubuntu:
  Fix Committed
Status in “lxc” package in Ubuntu:
  Triaged

Bug description:
  Right now the container policy uses bare rules for ptrace and signal.
  We should refine these rules to be container specific and add unix
  rules to do the same. Obviously, namespaces are intended to block
  these accesses in and of themselves, but this add an incremental
  improvement and security in depth in case something goes wrong there.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1373555/+subscriptions