[apparmor] Apparmor on Embedded devies.

[Murali Selvaraj]

Hi All,

We are planning to use "Apparmor profiles" as part of Security reasons.
-> Assume, we have finalized a profile for a certain process after
experiment in our setup/QA validation.
-> Next day, there is a possibility of any code merging where this
entry won't be available in the existing (2) profile as we freeze the
profile.
-> As we know that code has been merged/updated continuously (day to
day) on the particular process, Do we have any mechanism to ensure how
the Apparmor profile  aligns with the latest process/image?
-> What is your thought on using embedded device head-set?
-> Please share the detailed inputs.

Thanks
Murali.S