[apparmor] [Merge] lp:~cameronnemo/apparmor/ubuntu-email-geary into lp:apparmor

2015-02-28 Thread noreply
The proposal to merge lp:~cameronnemo/apparmor/ubuntu-email-geary into lp:apparmor has been updated. Status: Needs review => Merged For more details, see: https://code.launchpad.net/~cameronnemo/apparmor/ubuntu-email-geary/+merge/250583 -- Your team AppArmor Developers is requested to revie

[apparmor] [Merge] lp:~chkpnt/apparmor/ssl_certs into lp:apparmor

2015-02-28 Thread noreply
The proposal to merge lp:~chkpnt/apparmor/ssl_certs into lp:apparmor has been updated. Status: Needs review => Merged For more details, see: https://code.launchpad.net/~chkpnt/apparmor/ssl_certs/+merge/248191 -- Your team AppArmor Developers is requested to review the proposed merge of lp:

Re: [apparmor] [patch] cleanup smbd profile

2015-02-28 Thread Steve Beattie
On Sat, Feb 28, 2015 at 08:36:22PM +0100, Christian Boltz wrote: > Hello, > > the smbd profile contains /{,var/}run/cups/cups.sock rw, which is > covered by abstractions/cups-client. > > This patch removes the superfluous rule. > [ smbd-delete-cups.sock.diff ] Acked-by: Steve Beattie . Thanks.

[apparmor] [patch] tools.py: add functions to unload and reload profiles

2015-02-28 Thread Christian Boltz
Hello, this patch adds functions to unload and reload profiles to tools.py, and changes the code to use them. Also add a comment to act() that it's only used by aa-cleanprof. Notes: - For some unknown reason, act() (used by aa-cleanprof) used apparmor_parser -R instead of -r and therefore in

[apparmor] [patch] cleanup smbd profile

2015-02-28 Thread Christian Boltz
Hello, the smbd profile contains /{,var/}run/cups/cups.sock rw, which is covered by abstractions/cups-client. This patch removes the superfluous rule. [ smbd-delete-cups.sock.diff ] === modified file 'profiles/apparmor.d/usr.sbin.smbd' --- profiles/apparmor.d/usr.sbin.smbd 2014-08-11 21:22:5

[apparmor] [patch] /sbin/klogd and /sbin/syslog* moved to /usr/sbin

2015-02-28 Thread Christian Boltz
Hello, klogd, syslog-ng and syslogd moved from /sbin/ to /usr/sbin/ on openSUSE. Therefore this patch updates the profile to follow the move. I remember the discussion that a "named" profile looks better in such cases, therefore I'm using "profile klogd" instead of just adding the optional /usr

Re: [apparmor] [patch] merge 'path' if conditions in logparser.py / add_event_to_tree()

2015-02-28 Thread Christian Boltz
Hello, Am Freitag, 27. Februar 2015 schrieb Steve Beattie: > > logparser.py / add_event_to_tree() has 5 places to handle 'path' > > events. This patch merges most if conditions to reduce that to 2 > > places.> > > > > > > This patch is just a cleanup without any behaviour change, > > therefore >

Re: [apparmor] [patch] let logparser.py parse_event() change disconnected path events to 'ERROR'

2015-02-28 Thread Christian Boltz
Hello, Am Samstag, 28. Februar 2015 schrieb Steve Beattie: > On Mon, Feb 23, 2015 at 10:04:28PM +0100, Christian Boltz wrote: > > this patch changes logparser.py parse_event() so that it changes > > disconnected path events to aamode 'ERROR'. > > > > This means that aa-logprof will ignore the eve

Re: [apparmor] [Merge] lp:~smcv/apparmor/af-gaps into lp:apparmor

2015-02-28 Thread Steve Beattie
Hi Simon, Launchpad merge requests are fine for patch submissions, as well as patches sent to the apparmor@lists.ubuntu.com list (Tyler Hicks has submitted patches via git-send-email). A merge request does make it easier to retain authorship, however; raw patches require explicit action on the

Re: [apparmor] [patch] let logparser.py parse_event() change disconnected path events to 'ERROR'

2015-02-28 Thread Steve Beattie
On Mon, Feb 23, 2015 at 10:04:28PM +0100, Christian Boltz wrote: > Hallo, > > this patch changes logparser.py parse_event() so that it changes > disconnected path events to aamode 'ERROR'. > > This means that aa-logprof will ignore the event instead of crashing with > AppArmorException: 'Unex