Re: [apparmor] [parser patch] fix apparmor cache tempfile location to use passed arg

2013-07-25 Thread Seth Arnold
On Tue, Jul 23, 2013 at 08:36:12AM -0700, Steve Beattie wrote: > Subject: [parser patch] fix apparmor cache tempfile location to use passed arg > > This patch fixes problems in the handling of both the final cache > name location and the temporary cache file when an alternate location > is specifi

Re: [apparmor] [PATCH 10/10] use libapparmor's find mountpoint fn to find the interface

2013-07-25 Thread Seth Arnold
On Sun, Jul 21, 2013 at 10:32:53PM -0700, John Johansen wrote: > Drop support for the old subdomainfs mountpoint and use the fn exported > by libapparmor. > > Signed-off-by: John Johansen Acked-by: Seth Arnold > --- > parser/Makefile | 3 ++- > parser/parser_main.c | 53 > ++---

Re: [apparmor] [PATCH 08/10] From 69da7ad9b8007d33bbf4ffe4474f03e81e13eaa6 Mon Sep 17 00:00:00 2001 From: John Johansen Date: Sat, 3 Nov 2012 08:19:52 -0700 Subject: [PAT

2013-07-25 Thread Seth Arnold
On Sun, Jul 21, 2013 at 10:32:51PM -0700, John Johansen wrote: > change_hat 1.4 was an experiement is more directly controlling change_hat > by adding hat rulles to the profile. It has not been used since the > original experiment (4 years). So remove it > > > Signed-off-by: John Johansen Acke

Re: [apparmor] [PATCH 07/10] From eef17d94fc6189d2303ef38e025f0ca6805adc18 Mon Sep 17 00:00:00 2001 From: John Johansen Date: Sat, 3 Nov 2012 08:19:51 -0700 Subject: [PAT

2013-07-25 Thread Seth Arnold
On Sun, Jul 21, 2013 at 10:32:50PM -0700, John Johansen wrote: > remove old dead code that used to fail compilation if regular expressions > where detected in the rules and the apparmor kernel module did not support > regular expression matching. > > Signed-off-by: John Johansen Acked-by: Seth A

Re: [apparmor] [PATCH 06/10] From f5898cf8e0b2d9b032e349be6f7e4f57a6e12768 Mon Sep 17 00:00:00 2001 From: John Johansen Date: Sat, 3 Nov 2012 08:19:47 -0700 Subject: [PAT

2013-07-25 Thread Seth Arnold
On Sun, Jul 21, 2013 at 10:32:49PM -0700, John Johansen wrote: > This conversion is nothing more than what is required to get it to > compile. Further improvements will come as the code is refactored. > > Unfortunately due to C++ not supporting designated initializers, the auto > generation of af

Re: [apparmor] [PATCH 03/10] From a3f0ccf618c2016ce5fbaa0fe35d4f194fbefd2b Mon Sep 17 00:00:00 2001 From: John Johansen Date: Sat, 27 Oct 2012 04:49:23 -0700 Subject: [PA

2013-07-25 Thread John Johansen
On 07/25/2013 11:59 AM, John Johansen wrote: > On 07/25/2013 11:37 AM, Christian Boltz wrote: >> Hello, >> >> Am Sonntag, 21. Juli 2013 schrieb John Johansen: >>> -- /dev/null >>> +++ b/parser/tst/simple_tests/capability/ok_allow2.sd >>> @@ -0,0 +1,160 @@ >>> +# >>> +#=DESCRIPTION validate some use

Re: [apparmor] [PATCH 03/10] From a3f0ccf618c2016ce5fbaa0fe35d4f194fbefd2b Mon Sep 17 00:00:00 2001 From: John Johansen Date: Sat, 27 Oct 2012 04:49:23 -0700 Subject: [PA

2013-07-25 Thread John Johansen
On 07/25/2013 11:37 AM, Christian Boltz wrote: > Hello, > > Am Sonntag, 21. Juli 2013 schrieb John Johansen: >> -- /dev/null >> +++ b/parser/tst/simple_tests/capability/ok_allow2.sd >> @@ -0,0 +1,160 @@ >> +# >> +#=DESCRIPTION validate some uses of capabilties. >> +#=EXRESULT PASS >> +# vim:syntax

Re: [apparmor] [PATCH 03/10] From a3f0ccf618c2016ce5fbaa0fe35d4f194fbefd2b Mon Sep 17 00:00:00 2001 From: John Johansen Date: Sat, 27 Oct 2012 04:49:23 -0700 Subject: [PA

2013-07-25 Thread Christian Boltz
Hello, Am Sonntag, 21. Juli 2013 schrieb John Johansen: > -- /dev/null > +++ b/parser/tst/simple_tests/capability/ok_allow2.sd > @@ -0,0 +1,160 @@ > +# > +#=DESCRIPTION validate some uses of capabilties. > +#=EXRESULT PASS > +# vim:syntax=subdomain What about syntax=apparmor ? ;-) > +# Last Modi

Re: [apparmor] [PATCH] Add dconf abstraction.

2013-07-25 Thread John Johansen
On 07/25/2013 01:28 AM, intrigeri wrote: > Hi, > > intrig...@debian.org wrote (11 Jul 2013 19:52:00 GMT) : >> From: intrigeri > >> --- >> profiles/apparmor.d/abstractions/dconf | 4 >> 1 file changed, 4 insertions(+) >> create mode 100644 profiles/apparmor.d/abstractions/dconf > > Ping?

Re: [apparmor] [PATCH] Allow reading /etc/machine-id in the dbus-session abstraction.

2013-07-25 Thread Seth Arnold
On Thu, Jul 25, 2013 at 10:52:42AM +0200, intrig...@debian.org wrote: > From: intrigeri > Acked-by: Seth Arnold Thanks > D-Bus now uses /etc/machine-id in some cases: > https://bugs.freedesktop.org/show_bug.cgi?id=35228 > --- > profiles/apparmor.d/abstractions/dbus-session | 1 + > 1 file ch

Re: [apparmor] [PATCH] Allow reading /etc/machine-id in the dbus-session abstraction.

2013-07-25 Thread Seth Arnold
On Thu, Jul 25, 2013 at 10:57:42AM +0200, intrigeri wrote: > Hi, > > intrig...@debian.org wrote (25 Jul 2013 08:52:42 GMT) : > > D-Bus now uses /etc/machine-id in some cases: > > https://bugs.freedesktop.org/show_bug.cgi?id=35228 > > ... and on top of that, please find attached the corresponding

Re: [apparmor] [PATCH] Add dconf abstraction.

2013-07-25 Thread Seth Arnold
On Thu, Jul 25, 2013 at 10:28:44AM +0200, intrigeri wrote: > Hi, > > intrig...@debian.org wrote (11 Jul 2013 19:52:00 GMT) : > > From: intrigeri > > > --- > > profiles/apparmor.d/abstractions/dconf | 4 > > 1 file changed, 4 insertions(+) > > create mode 100644 profiles/apparmor.d/abstrac

Re: [apparmor] Where should the new aa-exec live in packaging

2013-07-25 Thread John Johansen
On 07/25/2013 03:57 AM, Jamie Strandboge wrote: > On 07/24/2013 05:29 PM, John Johansen wrote: >> On 07/24/2013 02:35 PM, Steve Beattie wrote: >>> On Wed, Jul 24, 2013 at 09:26:43AM -0700, John Johansen wrote: > >>> directory becoming more of an architecture dependent collection of >>> binaries. B

Re: [apparmor] Where should the new aa-exec live in packaging

2013-07-25 Thread Jamie Strandboge
On 07/24/2013 05:29 PM, John Johansen wrote: > On 07/24/2013 02:35 PM, Steve Beattie wrote: >> On Wed, Jul 24, 2013 at 09:26:43AM -0700, John Johansen wrote: >> directory becoming more of an architecture dependent collection of >> binaries. But it's not a strongly held position. >> > I actually do

Re: [apparmor] [PATCH] Allow reading /etc/machine-id in the dbus-session abstraction.

2013-07-25 Thread intrigeri
Hi, intrig...@debian.org wrote (25 Jul 2013 08:52:42 GMT) : > D-Bus now uses /etc/machine-id in some cases: > https://bugs.freedesktop.org/show_bug.cgi?id=35228 ... and on top of that, please find attached the corresponding change for Totem in lp:apparmor-profiles. Cheers, -- intrigeri | Gn

[apparmor] [PATCH] Allow reading /etc/machine-id in the dbus-session abstraction.

2013-07-25 Thread intrigeri
From: intrigeri D-Bus now uses /etc/machine-id in some cases: https://bugs.freedesktop.org/show_bug.cgi?id=35228 --- profiles/apparmor.d/abstractions/dbus-session | 1 + 1 file changed, 1 insertion(+) diff --git a/profiles/apparmor.d/abstractions/dbus-session b/profiles/apparmor.d/abstractions

Re: [apparmor] [PATCH] Add dconf abstraction.

2013-07-25 Thread intrigeri
Hi, intrig...@debian.org wrote (11 Jul 2013 19:52:00 GMT) : > From: intrigeri > --- > profiles/apparmor.d/abstractions/dconf | 4 > 1 file changed, 4 insertions(+) > create mode 100644 profiles/apparmor.d/abstractions/dconf Ping? (Meta: if 2 weeks is too short a delay for asking for rev