RAppArmor

From MaRDI portal
Software:33844



swMATH22048CRANRAppArmorMaRDI QIDQ33844

Bindings to AppArmor and Security Related Linux Tools

Jeroen Ooms

Last update: 4 December 2023

Copyright license: Apache License, Version 2.0

Software version identifier: 3.2.3, 0.5.0, 0.6.0, 0.8.0, 0.8.1, 0.8.3, 1.0.0, 1.0.1, 2.0.1, 2.0.2, 2.0, 3.0, 3.1, 3.2.1, 3.2.2, 3.2, 3.2.4


Source code repository: https://github.com/cran/RAppArmor

Bindings to kernel methods for enforcing security restrictions. AppArmor can apply mandatory access control (MAC) policies on a given task (process) via security profiles with detailed ACL definitions. In addition this package implements bindings for setting process resource limits (rlimit), uid, gid, affinity and priority. The high level R function 'eval.secure' builds on these methods to perform dynamic sandboxing: it evaluates a single R expression within a temporary fork which acts as a sandbox by enforcing fine grained restrictions without affecting the main R process. A portable version of this function is now available in the 'unix' package.