Description: R interfaces to Linux and AppArmor security stuff.

Description: R interfaces to Linux and AppArmor security methods.
SystemRequirements: libapparmor-dev, linux (>= 3.0)

Title: Interfaces to Linux and AppArmor security methods.
Description: This package implements R functions that interface to various methods in the Linux kernel related to enforcing security restrictions on a certain task (process). The package can apply mandatory access control (MAC) policies by loading an apparmor profile, and set hardware limits (rlimit), uid, gid, affinity and priority of the current process, directly from within R. The high level function eval.secure builds on these foundations to support dynamic sandboxing: it evaluates a single expression in a temporary fork with hard security restrictions and hardware limits without any side effects on the main R session.

Title: Bindings to AppArmor and Security Related Linux Tools
SystemRequirements: linux (>= 3.0), libapparmor-dev (optional)
Description: Bindings to various methods in the kernel for enforcing security
restrictions. AppArmor can apply mandatory access control (MAC) policies on
a given task (process) via security profiles with detailed ACL definitions.
In addition the package has kernel bindings for setting the process hardware
resource limits (rlimit), uid, gid, affinity and priority. The high level R
function 'eval.secure' builds on these methods to do dynamic sandboxing:
it evaluates a single R expression within a temporary fork which acts as a
sandbox by enforcing fine grained restrictions without affecting the main R

process. Recent versions on this package can also be installed on systems
without libapparmor, in which case some features are automatically disabled.

Description: Bindings to kernel methods for enforcing security restrictions.
AppArmor can apply mandatory access control (MAC) policies on a given task
(process) via security profiles with detailed ACL definitions. In addition
this package implements bindings for setting process resource limits (rlimit),
uid, gid, affinity and priority. The high level R function 'eval.secure'
builds on these methods to perform dynamic sandboxing: it evaluates a single
R expression within a temporary fork which acts as a sandbox by enforcing
fine grained restrictions without affecting the main R process. A portable
version of this function is now available in the 'unix' package.
SystemRequirements: linux (>= 3.0), libapparmor-dev