[apparmor] [PATCH] ubuntu-helpers: allow access to dbus session bus

2013-09-29 Thread Felix Geyer
The ubuntu-helpers/sanitized_helper profile should allow applications to access to dbus session bus. On Ubuntu saucy the lack of dbus rules cause some KDE applications to crash when launched from Firefox. === modified file 'profiles/apparmor.d/abstractions/ubuntu-helpers' --- profiles/apparmor.d/

[apparmor] [PATCH] Updates for nvidia abstraction

2013-09-29 Thread Felix Geyer
The nvidia abstractions lacks a few rules that are needed by the latest driver version. I've tested it with nvidia-319-updates/319.49-0ubuntu2 on Ubuntu saucy. === modified file 'profiles/apparmor.d/abstractions/nvidia' --- profiles/apparmor.d/abstractions/nvidia 2013-01-02 22:39:45 + +++

Re: [apparmor] force-complain symlinks break cache?

2013-09-29 Thread John Johansen
On 09/25/2013 03:41 PM, Christian Boltz wrote: > Hello, > > it seems using force-complain/ symlinks breaks cache usage: > > root@beta:/etc/apparmor.d/force-complain> time rcapparmor reload > redirecting to systemctl reload apparmor > > real0m0.791s > user0m0.004s > sys 0m0.000s > >

Re: [apparmor] [patch] [parser] allow the parser to process directories as a parameter

2013-09-29 Thread John Johansen
On 09/29/2013 04:06 AM, Christian Boltz wrote: > Hello, > > Am Sonntag, 29. September 2013 schrieb John Johansen: >> allow directories to be passed to the parser >> >> Allow directories to be passed directly to the parser and handled >> instead of needing an initscript to find the files in the dir

Re: [apparmor] [patch] [parser] allow the parser to process directories as a parameter

2013-09-29 Thread Christian Boltz
Hello, Am Sonntag, 29. September 2013 schrieb John Johansen: > allow directories to be passed to the parser > > Allow directories to be passed directly to the parser and handled > instead of needing an initscript to find the files in the directory. Sounds like a good idea :-) > Signed-off-by: J

[apparmor] [patch] [parser] allow the parser to process directories as a parameter

2013-09-29 Thread John Johansen
allow directories to be passed to the parser Allow directories to be passed directly to the parser and handled instead of needing an initscript to find the files in the directory. Signed-off-by: John Johansen --- parser/parser.h | 1 + parser/parser_include.c | 4 +-- parser/parser_in