[apparmor] Reminder: IRC meeting today

2015-04-14 Thread Christian Boltz
Hello, http://wiki.apparmor.net/index.php/MeetingAgenda says we have a meeting today 20:00 UTC - that's in about 8 hours ;-) For me, it's an hour later than usual because we have summer time now. Don't ask how many (wo)man-hours are wasted to set most[1] clocks in europe twice a year...

[apparmor] [patch] update postfix-common abstraction

2015-04-14 Thread Steve Beattie
Update the postfix-common abstraction to cope with signal and unix socket mediation, update the access to the sasl library locations in a multiarch compliant way, and allow access to limited bits of the filesystem paths under which postfix chroots itself to (/var/spool/postfix/ on Ubuntu).

[apparmor] [patch 0/3] introduce and use NetworkRule and NetworkRuleset classes

2015-04-14 Thread Christian Boltz
Hello, this patchset introduces and uses the NetworkRule and NetworkRuleset classes and changes aa.py etc. to use them instead of a sub-hasher. Regards, Christian Boltz -- rpmdb: PANIC: fatal region error detected; run recovery Du wohnst nicht zufällig in Bielefeld? [ Cornelia Böttge und

[apparmor] [patch 1/3] Add NetworkRule and NetworkRuleset classes

2015-04-14 Thread Christian Boltz
Hello, this patch adds utils/apparmor/rule/network.py with the NetworkRule and NetworkRuleset classes. These classes are meant to handle network rules. In comparison to the existing code in aa.py, relevant news are: - the keywords are checked against a list of allowed domains, types and

[apparmor] [patch 2/3] Add tests for NetworkRule and NetworkRuleset

2015-04-14 Thread Christian Boltz
Hello, this patch adds utils/test/test-network.py with tests for NetworkRule and NetworkRuleset. The tests are hopefully self-explaining, so let me just mention the most important things: - I started to play with namedtuple, which looks very useful (see exp) - the test loops make the tests much

[apparmor] [patch 3/3] Convert existing code to use NetworkRule and NetworkRuleset

2015-04-14 Thread Christian Boltz
Hello, Change aa.py to use NetworkRule and NetworkRuleset instead of a sub-hasher to store, check and write network rules. In detail: - drop profile_known_network() and use is_known_rule() instead - replace match_net_includes() usage with match_includes() calls - drop delete_net_duplicates(), use

Re: [apparmor] [patch] Make sure aa-cleanprof de-duplicates capability rules

2015-04-14 Thread Christian Boltz
Hello, Am Montag, 13. April 2015 schrieb Steve Beattie: On Tue, Apr 14, 2015 at 12:50:26AM +0200, Christian Boltz wrote: Am Montag, 13. April 2015 schrieb Steve Beattie: On Sun, Apr 12, 2015 at 03:32:25AM +0200, Christian Boltz wrote: CleanProf.remove_duplicate_rules() didn't call

Re: [apparmor] New LibreOffice Profile

2015-04-14 Thread Christian Boltz
Hello, Am Freitag, 10. April 2015 schrieb Bryan Quigley: but the excessive variable definition in the soffice.bin profile uncovered a bug in aa-complain ;-) Glad I could help :). ;-) Now you just need to push Steve (or someone else) to review my pending patches, so that the fix for those