[apparmor] Symlinks creation

2013-09-19 Thread azurIt
Hi, is there a way how can i deny symlinks creation? Thank you. azur -- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor

[apparmor] [patch] fix aa-unconfined to work in all languages

2013-09-19 Thread Christian Boltz
Hello, as discussed in #apparmor: aa-unconfined displays less unconfined processes in some languages (for example with LANG=pt_BR) because a regex relies on netstat output. The following patch enforces LANG=C to make sure aa-unconfined always sees the expected output. I propose this patch for

[apparmor] [patch] utils/*.pod: fix broken URL

2013-09-19 Thread Christian Boltz
Hello, the following patch fixes broken URLs in various utils/*.pod files. (The broken URLs were introduced in r1582.) I propose this patch for trunk and for the 2.8 branch. === modified file 'utils/aa-audit.pod' --- utils/aa-audit.pod 2011-02-07 23:39:54 + +++ utils/aa-audit.pod 2013-09-

Re: [apparmor] [patch] utils/*.pod: fix broken URL

2013-09-19 Thread Christian Boltz
Hello, Am Donnerstag, 19. September 2013 schrieb Steve Beattie: > On Thu, Sep 19, 2013 at 08:52:19PM +0200, Christian Boltz wrote: > > the following patch fixes broken URLs in various utils/*.pod files. > > (The broken URLs were introduced in r1582.) > > > > I propose this patch for trunk and for

Re: [apparmor] [patch] fix aa-unconfined to work in all languages

2013-09-19 Thread Steve Beattie
On Thu, Sep 19, 2013 at 11:31:19PM +0200, Christian Boltz wrote: > Hello, > > as discussed in #apparmor: > > aa-unconfined displays less unconfined processes in some languages (for > example with LANG=pt_BR) because a regex relies on netstat output. > > The following patch enforces LANG=C to ma

Re: [apparmor] [patch] utils/*.pod: fix broken URL

2013-09-19 Thread Steve Beattie
On Thu, Sep 19, 2013 at 08:52:19PM +0200, Christian Boltz wrote: > Hello, > > the following patch fixes broken URLs in various utils/*.pod files. > (The broken URLs were introduced in r1582.) > > I propose this patch for trunk and for the 2.8 branch. Acked-by: Steve Beattie for trunk and 2.8 T

[apparmor] GSoC review r63 and r64

2013-09-19 Thread Christian Boltz
Hello, the review for r63 and r64 is attached. I'd welcome an additional review by a native english speaker because large parts of my review are wording changes in the manpages (including changes to the text we currently have in bzr trunk). My english isn't too bad, but a second pair of eyes w

Re: [apparmor] [PATCH 3/8] add optional allow prefix to the language v3

2013-09-19 Thread Seth Arnold
On Wed, Sep 18, 2013 at 10:46:26PM -0700, Steve Beattie wrote: > In this case, the behavior with capabilities is mimicking the already > accepted behavior for file rules, which is that deny rules override > allow rules (even ones without the 'allow' keyword). Excellent, thanks for the description

Re: [apparmor] [patch] fix aa-unconfined to work in all languages

2013-09-19 Thread Kshitij Gupta
Hello, If someone will ever read the code they'll probably wonder what LANG=C is supposed to do? and in some weird case if it happens that someone has netstat with a translation local 'C' (very unlikely ;-) we might get into a problem. In my opinion use of LANG=en or LANG=en_US seems better (but

Re: [apparmor] [PATCH 3/8] add optional allow prefix to the language v3

2013-09-19 Thread John Johansen
On 09/18/2013 10:46 PM, Steve Beattie wrote: > On Mon, Sep 16, 2013 at 11:37:28PM -0700, Steve Beattie wrote: >> On Mon, Sep 16, 2013 at 05:06:51PM -0700, Seth Arnold wrote: >>> On Mon, Sep 16, 2013 at 04:49:49PM -0700, Steve Beattie wrote: >>> >>> I think I'd expect the above to FAIL instead of PA