Re: [apparmor] IPC syntax - again

2013-06-28 Thread Seth Arnold
Impressive email, thanks. I can't begin to address all the open questions you raised, but we have to start somewhere, so here's my stab at what I felt was most important: Pairing You've very nearly convinced me that for the various forms of on-machine IPC pairing does not make a lot of sense and

Re: [apparmor] Problem with audit rule modifier

2013-06-28 Thread azurIt
>> Hi, >> >> i'm having problems with audit rule modifier - it's just not working when >> used alone. I'm trying to enable only logging with this: >> audit /home/** a, >> audit /home/** w, >By only logging you mean logging of an access but not granting permission? I mean logging of an access AN

Re: [apparmor] IPC syntax - again

2013-06-28 Thread Tyler Hicks
I had to trim this down and focus on one section that has been bothering me. It is based upon the idea that we can do away with pairing. While I mostly agree, DBus intricacies were making it difficult for me to understand what exactly we would be doing away with. On 2013-06-26 11:00:52, John Johan

Re: [apparmor] Problem with audit rule modifier

2013-06-28 Thread John Johansen
On 06/28/2013 08:36 AM, azurIt wrote: > Hi, > > i'm having problems with audit rule modifier - it's just not working when > used alone. I'm trying to enable only logging with this: > audit /home/** a, > audit /home/** w, By only logging you mean logging of an access but not granting permission?

Re: [apparmor] [PATCH] removed unused perl requires from aa-exec

2013-06-28 Thread Marc Deslauriers
On 13-06-28 01:27 PM, Jamie Strandboge wrote: > I noticed today that aa-exec requires Time::Local and File::Basename, but > doesn't use either. This patch fixes that. > > > Acked-by: Marc Deslauriers Marc. signature.asc Description: OpenPGP digital signature -- AppArmor mailing list AppAr

[apparmor] [PATCH] removed unused perl requires from aa-exec

2013-06-28 Thread Jamie Strandboge
I noticed today that aa-exec requires Time::Local and File::Basename, but doesn't use either. This patch fixes that. -- Jamie Strandboge http://www.ubuntu.com/ remove unneeded perl requires on Time::Local and File::Basename Acked-By: Jamie Strandboge diff: === modified file 'u

[apparmor] Problem with audit rule modifier

2013-06-28 Thread azurIt
Hi, i'm having problems with audit rule modifier - it's just not working when used alone. I'm trying to enable only logging with this: audit /home/** a, audit /home/** w, It should work according to documentation ( http://wiki.apparmor.net/index.php/QuickProfileLanguage#Rule_Modifiers ) but it