News for hackers. Stuff that matters.

A comment on Application Container Security Guide [pdf]. Parent comment

Re:Application Container Security Guide [pdf] by SteveNuts on Monday November 20, 2017 @08:00PM (#15744727)
Isn't that one of the main functions of a Mandatory ACL tool like AppArmor/SELinux - not allowing a program to operate outside of the normal confines?

I'd be happy to know it was working as indented, and a short google would lead you to the answer. In fact, Digital Ocean's documentation is the first result and it's right there in the steps.

[ Parent | on HN ]
Re:Application Container Security Guide [pdf] by paulddraper on Monday November 20, 2017 @10:26PM (#15745280)
It is the purpose of AppArmor. But in normal land, we just expect documented MySQL options to work.

It really was insane for MySQL package maintainers to make AppArmor the default experience. It ought to have been a separate package, where people that wanted AppArmor could have AppArmor.

[ Parent | on HN ]