AppArmor for Complete System - Including init, PID1, Systemd, Everything! - Full System MAC policy

[Patrick]

Suggestion: "Tor Control Panel" on Gateway without root reminds me of upgrade-nonroot. Would it be better for security if we got rid of that for sake of apparmor-profile-everything?

Also interesting in context of:

Multiple Boot Modes for Better Security: an Implementation of Untrusted Root

Untrusted Root - improve Security by Restricting Root

Is it currently being argued towards Untrusted Root? I.e. do you think it is a good idea to try to restrict malware which gained root access? examples which may point into that direction: Blacklist more kernel modules to reduce attack surface - #8 by Algernon enforce kernel module software signature verification [module signing] / disallow kernel module loading by default enable Linux kernel gpg verification in grub and/or enable Secure Boot by default Goal of untrusted root could be: t…