[apparmor] Query about AppArmor's Profile Transitions

[Abhishek Vijeev]

Hi,

We had a small question regarding AppArmor's profile transitions.

Currently, AppArmor allows 'pix' and 'cix' transitions. However, we would like to extend AppArmor to
allow a 'pcix' transition. To clarify what we mean by 'pcix', we're looking for a way by which we
can specify the following policy: 'look for a specific profile, but if one doesn't exist, look for a
child profile, otherwise inherit the current profile'. Are there any challenges to implementing
this? Also, is this a feature that is planned for release in future versions of AppArmor?

Thank you,
Abhishek Vijeev.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20191001/80723e27/attachment.html>