[apparmor] [patch] parser: add rttime rlimit support [v2] (was Re: [patch 13/18] parser: add rttime rlimit support)

2014-01-17 Thread Steve Beattie
On Fri, Jan 17, 2014 at 12:45:27AM +0100, Christian Boltz wrote: Am Donnerstag, 16. Januar 2014 schrieb Steve Beattie: This patch adds support for the rttime rlimit (aka RLIMIT_RTTIME), available since the 2.6.25 kernel, according to the getrlimit(2) man page; see that man page for more

Re: [apparmor] Updating the Pidgin profile

2014-01-17 Thread intrigeri
Hi Simon, Simon Deziel wrote (15 Jan 2014 01:00:53 GMT) : I don't know if that could be useful to you but I've been using a customized profile on Ubuntu 12.04 available at https://github.com/simondeziel/aa-profiles/blob/master/12.04/usr.bin.pidgin I have some questions and comments about it.

[apparmor] [PATCH] parser: fix preprocessing output

2014-01-17 Thread John Johansen
The preprocessing output is broken, in a couple of places includes come out like #include ##included tunables/home which is wrong because #include by itself is broken, and since -p is supposed to be removing includes, it should not be directly echoed any keyword in the keyword table is

[apparmor] [Merge] lp:~elmo/apparmor-profiles/lldpd into lp:apparmor-profiles

2014-01-17 Thread James Troup
James Troup has proposed merging lp:~elmo/apparmor-profiles/lldpd into lp:apparmor-profiles. Requested reviews: AppArmor Developers (apparmor-dev) For more details, see: https://code.launchpad.net/~elmo/apparmor-profiles/lldpd/+merge/202092 Profile for lldpd. We're using this on 10.04 and

[apparmor] Sharing profiles maintenance once they're ready for production

2014-01-17 Thread intrigeri
Hi, as some of you know, I've been working on including more AppArmor profiles into Debian. Importing stuff is not that hard as a one-shot job, but I am concerned about long-term maintenance, and am not convinced by the current workflow and infrastructure we have to maintain profiles once they

Re: [apparmor] [patch] dnsmasq / NM profile update

2014-01-17 Thread Jamie Strandboge
On 01/17/2014 11:17 AM, Christian Boltz wrote: Hello, I received the following patch from develop7 [at] develop7.info: allow dnsmasq read config created by recent NetworkManager (see

Re: [apparmor] [patch] utils: fix apparmor.vim rlimits support (was Re: [patch 13/18] parser: add rttime rlimit support)

2014-01-17 Thread Christian Boltz
Hello, Am Donnerstag, 16. Januar 2014 schrieb Steve Beattie: On Fri, Jan 17, 2014 at 12:45:27AM +0100, Christian Boltz wrote: (and BTW, did you test if apparmor.vim displays all tests from 12/18 correctly?) Apparently I missed all the incorrect highlighting vim gave me while creating

Re: [apparmor] Updating the Pidgin profile

2014-01-17 Thread Simon Deziel
On 14-01-17 06:38 AM, intrigeri wrote: Hi Simon, Simon Deziel wrote (15 Jan 2014 01:00:53 GMT) : I don't know if that could be useful to you but I've been using a customized profile on Ubuntu 12.04 available at https://github.com/simondeziel/aa-profiles/blob/master/12.04/usr.bin.pidgin I

Re: [apparmor] [PATCH] parser: fix preprocessing output

2014-01-17 Thread Steve Beattie
On Fri, Jan 17, 2014 at 04:36:39AM -0800, John Johansen wrote: The preprocessing output is broken, in a couple of places includes come out like #include ##included tunables/home which is wrong because #include by itself is broken, and since -p is supposed to be removing

Re: [apparmor] Bug#735470: Fwd: Bug#735470: Could be implemented centrally with a dpkg trigger instead of requiring every package shipping an apparmor file to use dh_apparmor

2014-01-17 Thread John Johansen
On 01/17/2014 02:26 AM, Didier 'OdyX' Raboud wrote: Le jeudi, 16 janvier 2014, 14.49:06 Kees Cook a écrit : On Thu, Jan 16, 2014 at 07:37:04PM +0100, Didier 'OdyX' Raboud wrote: man deb-trigggers contradicts you, in my reading; an 'activate /etc/apparmor.d' triggers' file in apparmor would

Re: [apparmor] Bug#735470: Fwd: Bug#735470: Could be implemented centrally with a dpkg trigger instead of requiring every package shipping an apparmor file to use dh_apparmor

2014-01-17 Thread John Johansen
On 01/17/2014 04:20 PM, Seth Arnold wrote: [I've trimmed the Cc:, it didn't seem worthwhile to keep all this in the Debian BTS in addition to the usual mail list archives.] On Thu, Jan 16, 2014 at 04:15:35PM -0800, John Johansen wrote: It does not at the moment consider what is loaded into

Re: [apparmor] [patch 14/18] parser: add additional language tests to get wider test coverage

2014-01-17 Thread Steve Beattie
On Fri, Jan 17, 2014 at 01:08:30AM +0100, Christian Boltz wrote: Am Donnerstag, 16. Januar 2014 schrieb Steve Beattie: This patch adds several assorted language tests, to exercise various parts of the parser that were not being covered by the language tests previously. Areas lacking were