When using AppArmor, it is customary in development phase to leave in place access to some features that are very useful, but that would jeopardize the system in production and would leave it vulnerable to certain types of attacks. With AppArmor on RDK, we’ve identified the following features that should be left in place for …
Category: Uncategorized
Premium App data protection in RDK using AppArmor
Introduction While RDK6 will be moving to containers to host the Premium Apps, running the Premium Apps with their own User instead of running as root is also a valid option, if its data can be protected. While setting the permissions strictly to allow only the Premium App user to access its data, Linux permissions …