[apparmor] (no subject)

2013-07-11 Thread intrigeri
Hi, Jamie Strandboge wrote (10 Jun 2013 13:58:38 GMT) : > My gut feeling is that dconf > should be in its own abstraction and only allow 'r' access and > applications can add 'w' as necessary (or maybe have dconf and > dconf-write abstractions that applications could use). OK. Thanks for teachin

[apparmor] [PATCH] Add dconf abstraction.

2013-07-11 Thread intrigeri
From: intrigeri --- profiles/apparmor.d/abstractions/dconf | 4 1 file changed, 4 insertions(+) create mode 100644 profiles/apparmor.d/abstractions/dconf diff --git a/profiles/apparmor.d/abstractions/dconf b/profiles/apparmor.d/abstractions/dconf new file mode 100644 index 000..3da45

Re: [apparmor] apparmor policy versioning

2013-07-11 Thread Christian Boltz
Hello, Am Mittwoch, 10. Juli 2013 schrieb Jamie Strandboge: > On 07/10/2013 04:18 PM, John Johansen wrote: > > So it turns out we are going to need to support policy versioning > > (Christian can gloat now). I already wanted it when we enforced the trailing / on directory names some years ago ;

[apparmor] C based aa-exec

2013-07-11 Thread John Johansen
So this is a C based version of aa-exec to replace the perl version. --- /* * Copyright (C) 2013 Canonical Ltd. * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License published by the Free Softwar

Re: [apparmor] C based aa-exec

2013-07-11 Thread Seth Arnold
On Thu, Jul 11, 2013 at 03:53:05PM -0700, John Johansen wrote: > So this is a C based version of aa-exec to replace the perl version. I like it better already... but... :) > --- > > /* > * Copyright (C) 2013 Canonical Ltd. > * > * This program is free software; you can redistribute it and