AppArmor In Linux 7.3 Adds Support For User-Space Compressed Policies

AppArmor in the upcoming Linux 7.3 kernel gains support for user-space compressed security policies, allowing policies to be compressed before being submitted to the kernel instead of only being compressed by the kernel module afterward. Canonical's Maxime Bélair, who implemented the feature, reports up to 30% improved system time for systems with large AppArmor profiles. User-space compression also allows higher compression levels than the default kernel Zstd level, benefiting embedded systems with limited memory. The update also adds an audit mode for silencing certain messages and refactors network mediation. The Linux 7.3 merge window closes soon ahead of the v7.3-rc1 release.

Source: https://www.phoronix.com/news/Linux-7.3-AppArmor. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.