Perform full verification of loaded policy
configname: CONFIG_SECURITY_APPARMOR_PARANOID_LOAD
Linux Kernel Configuration
└─>Security options
└─>Perform full verification of loaded policy
In linux kernel since version 6 (release Date: 2022-10-02)
This options allows controlling whether apparmor does a full
verification of loaded policy. This should not be disabled
except for embedded systems where the image is read only,
includes policy, and has some form of integrity check.
Disabling the check will speed up policy loads.
verification of loaded policy. This should not be disabled
except for embedded systems where the image is read only,
includes policy, and has some form of integrity check.
Disabling the check will speed up policy loads.