Comment 3 for bug 484786

Revision history for this message
Kees Cook (kees) wrote : Re: Too easy to circumvent AppArmor using btrfs snapshots

Sounds like the ioctl to create snapshots should be confined by the profile.