1

I have defined the following profile

#include <tunables/global>

/usr/bin/convert.im6 {
  #include <abstractions/base>

  /usr/bin/convert.im6 mr,

  /** mrwlkix,
  set rlimit as <= 8G,
}

and loaded it via aa-enforce /usr/bin/convert.
However, newly started processes of this binary do not show up in aa-status at all.

Could it be because they are started with nice -n +19 convert ...?
Or because another process with a defined profile is starting them?

What is going wrong? How do I get AppArmor do enforce those processes?

1 Answer 1

1

It was indeed caused by the profile of the parent application.

I have created the following snippet and #included it in the beginning of all profiles that may start one of the programs:

/usr/bin/convert.im6 Pix,

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .