Re: [apparmor] [Patch 0/1] RFC: apparmor profile directory

2012-07-06 Thread Christian Boltz
Hello, Am Freitag, 6. Juli 2012 schrieb John Johansen: > On 07/06/2012 03:18 PM, Christian Boltz wrote: > > Am Donnerstag, 5. Juli 2012 schrieb John Johansen: > >> The best it could do is apply the same mapping to the tools apply. > > > > Sounds like a good idea, but it doesn't cover everything ;

[apparmor] [Bug 1021967] [NEW] genprof doesn't escape special characters

2012-07-06 Thread Christian Boltz
Public bug reported: (copy&paste from my mail on the apparmor ML) Just curious - how would that profile name look as filename for /etc/apparmor.d/ ? Hmm, let's try... # aa-genprof '/**' /** does not exist, please double-check the path. OK, I'm feeling adventurous ;-) # touch '/**' # aa-genpro

Re: [apparmor] [patch] /bin/ping - usrMerge

2012-07-06 Thread John Johansen
On 07/06/2012 03:39 PM, Christian Boltz wrote: > Hello, > > maybe you already heard that some distributions (at least Fedora and > openSUSE) are going to move binaries from /bin/ to /usr/bin/ (and create > a compatibility symlink in /bin/). > yeah I think I heard something about that madness ;-

Re: [apparmor] [Patch 0/1] RFC: apparmor profile directory

2012-07-06 Thread John Johansen
On 07/06/2012 03:18 PM, Christian Boltz wrote: > Hello, > > Am Donnerstag, 5. Juli 2012 schrieb John Johansen: >> The best it could do is apply the same mapping to the tools apply. > > Sounds like a good idea, but it doesn't cover everything ;-) (see below) > >> However I think Christian is >>

[apparmor] [patch] /bin/ping - usrMerge

2012-07-06 Thread Christian Boltz
Hello, maybe you already heard that some distributions (at least Fedora and openSUSE) are going to move binaries from /bin/ to /usr/bin/ (and create a compatibility symlink in /bin/). If that's new to you, have a look at http://en.opensuse.org/openSUSE:Usr_merge http://www.freedesktop.org/wiki/

Re: [apparmor] [Patch 0/1] RFC: apparmor profile directory

2012-07-06 Thread Christian Boltz
Hello, Am Donnerstag, 5. Juli 2012 schrieb John Johansen: > The best it could do is apply the same mapping to the tools apply. Sounds like a good idea, but it doesn't cover everything ;-) (see below) > However I think Christian is > right that passing through whitespace, etc could be problemati