[apparmor] [Patch] cleanup usr.sbin.ntpd profile

2013-09-30 Thread Christian Boltz
Hello, this patch removes some rules from the ntpd profile that are already covered by abstractions: - the network rules are in abstractions/nameservice - /etc/gai.conf is also in abstractions/nameservice - @{PROC}/sys/kernel/ngroups_max is in abstractions/base I found those superfluous rules

Re: [apparmor] [PATCH] Updates for nvidia abstraction

2013-09-30 Thread Felix Geyer
On 30.09.2013 20:19, Jamie Strandboge wrote: + owner @{HOME}/.nvidia/ rw, + owner @{HOME}/.nvidia/** rwm, I've not seen 'm' for @{HOME}/.nvidia/** - this isn't ideal but 'ok' I guess. + owner /tmp/gl* m, This I don't like this at all, especially since many will presumably use the

Re: [apparmor] [PATCH] Updates for nvidia abstraction

2013-09-30 Thread Jamie Strandboge
On 09/30/2013 04:43 PM, Felix Geyer wrote: On 30.09.2013 20:19, Jamie Strandboge wrote: + owner @{HOME}/.nvidia/ rw, + owner @{HOME}/.nvidia/** rwm, I've not seen 'm' for @{HOME}/.nvidia/** - this isn't ideal but 'ok' I guess. + owner /tmp/gl* m, This I don't like this at all,