Re: [apparmor] Problem with audit rule modifier

2013-06-30 Thread azurIt
Hi, i'm having problems with audit rule modifier - it's just not working when used alone. I'm trying to enable only logging with this: audit /home/** a, audit /home/** w, By only logging you mean logging of an access but not granting permission? I mean logging of an access AND granting permi

Re: [apparmor] Problem with audit rule modifier

2013-06-30 Thread John Johansen
On 06/30/2013 12:45 AM, azurIt wrote: > Hi, > > i'm having problems with audit rule modifier - it's just not working when > used alone. I'm trying to enable only logging with this: > audit /home/** a, > audit /home/** w, By only logging you mean logging of an access bu

Re: [apparmor] Problem with audit rule modifier

2013-06-30 Thread azurIt
Hi, i'm having problems with audit rule modifier - it's just not working when used alone. I'm trying to enable only logging with this: audit /home/** a, audit /home/** w, By only logging you mean logging of an access but not granting permission? I mean logging of an access AND granting permi

Re: [apparmor] IPC syntax - again

2013-06-30 Thread John Johansen
On 06/28/2013 04:49 PM, Seth Arnold wrote: > Impressive email, thanks. > > I can't begin to address all the open questions you raised, but we have > to start somewhere, so here's my stab at what I felt was most important: > > Pairing > > You've very nearly convinced me that for the various forms

Re: [apparmor] IPC syntax - again

2013-06-30 Thread John Johansen
On 06/28/2013 11:55 PM, John Johansen wrote: > On 06/28/2013 01:57 PM, Tyler Hicks wrote: >> I had to trim this down and focus on one section that has been bothering >> me. It is based upon the idea that we can do away with pairing. While I >> mostly agree, DBus intricacies were making it difficult

Re: [apparmor] Problem with audit rule modifier

2013-06-30 Thread John Johansen
On 06/30/2013 02:56 AM, azurIt wrote: >>> Hi, >>> >>> i'm having problems with audit rule modifier - it's just not working >>> when used alone. I'm trying to enable only logging with this: >>> audit /home/** a, >>> audit /home/** w, >> By only logging you mean logging o

Re: [apparmor] Problem with audit rule modifier

2013-06-30 Thread azurIt
Hi, i'm having problems with audit rule modifier - it's just not working when used alone. I'm trying to enable only logging with this: audit /home/** a, audit /home/** w, >>> By only logging you mean logging of an access but not granting >

Re: [apparmor] Problem with audit rule modifier

2013-06-30 Thread John Johansen
On 06/30/2013 04:02 AM, azurIt wrote: > Hi, > > i'm having problems with audit rule modifier - it's just not working > when used alone. I'm trying to enable only logging with this: > audit /home/** a, > audit /home/** w, By only logging you

Re: [apparmor] Problem with audit rule modifier

2013-06-30 Thread azurIt
>> Hi, >> >> i'm having problems with audit rule modifier - it's just not working >> when used alone. I'm trying to enable only logging with this: >> audit /home/** a, >> audit /home/** w, > By only logging you mean logging of an access but n

Re: [apparmor] Problem with audit rule modifier

2013-06-30 Thread John Johansen
On 06/30/2013 06:44 AM, azurIt wrote: >>> Hi, >>> >>> i'm having problems with audit rule modifier - it's just not >>> working when used alone. I'm trying to enable only logging with >>> this: >>> audit /home/** a, >>> audit /home/** w,

Re: [apparmor] Problem with audit rule modifier

2013-06-30 Thread John Johansen
On 06/30/2013 03:25 PM, John Johansen wrote: > On 06/30/2013 06:44 AM, azurIt wrote: Hi, i'm having problems with audit rule modifier - it's just not working when used alone. I'm trying to enable only logging with this:

Re: [apparmor] [PATCH] fix missing long opt arg value

2013-06-30 Thread Steve Beattie
On Wed, Jun 26, 2013 at 11:23:15AM -0700, John Johansen wrote: > On 06/26/2013 11:05 AM, Kees Cook wrote: > > Using --subdomainfs without an argument triggers a segfault. This was due > > to the long option missing the "has_arg" flag. > > > > Signed-off-by: Kees Cook > > > > > > === modified fi