Identifies the AppArmor default profile changes required before shipping RDK to production — including removing the remount capability, and denying access to apparmor_parser, aa-disable, aa-complain and the AppArmor init script.
Category: RDK
Articles about the Reference Design Kit (RDK) platform for Smart TV and Set-Top Box development.
Premium App data protection in RDK using AppArmor
How to use AppArmor’s MAC policy with the owner keyword to achieve genuine per-app data isolation in RDK’s WPEFramework — preventing even root from accessing Amazon Prime Video or YouTube data on a shared STB or Smart TV device.