I’d like to discuss easier policy generation by designing a generic node interface description to be specified by individual packages, thereby allowing an end-user to generate a policy without needing to be an expert in every component being used (think Apache shipping its own apparmor profile rather than expecting the average Apache user to do it).
1 Like