[Bug 1501966] Re: support changing Apparmor hats

[John Johansen]

It never was, and I don't think the patch ever made it into Novell/Suse
openssh either. I think the only place it landed was in Immunix 7.3 on
openssh 3.8 (this is pre-apparmor being know as subdomain at the time)

The patch would have to be reworked to work with apparmor, and that
isn't even taking into account

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/1501966

Title:
  support changing Apparmor hats

Status in openssh package in Ubuntu:
  New

Bug description:
  Some older versions of OpenSSH had a patch allowing the daemon to
  change Apparmor hats to apply different containment profiles to
  different code paths (AUTHENTICATED, EXEC, PRIVSEP, etc).

  This feature would need to be ported to recent OpenSSH versions and
  sent upstream for inclusion in the portable branch.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/1501966/+subscriptions