Skip to content

fapolicyd-1.1.5

Compare
Choose a tag to compare
@stevegrubb stevegrubb released this 27 Sep 14:39
· 192 commits to main since this release

This release adds a new check to fapolicyd-cli to allow detection of files in the PATH variable that are not in the trustdb. Also, a new configuration option for using FAN_MARK_FILESYSTEM if the kernel supports it. The default is off. This release also fixes a bug where trusted static apps can start programs with ld.so which is not detected by the ldso_pattern.