Re: [apparmor] [patch] Fix NETWORK RULE in apparmor.d manpage

On Thu, Jun 25, 2015 at 10:10:39PM +0200, Christian Boltz wrote: > Hello, > > this patch fixes NETWORK RULE in apparmor.d manpage. > > It's allowed to only specify a TYPE without specifying a DOMAIN. > > Also add a missing "]" for QUALIFIERS. Acked-by: Seth Arnold Thanks > > > [ apparmor.d

Re: [apparmor] [patch] Improve user-visible exception handling

On Thu, Jun 25, 2015 at 09:36:13PM +0200, Christian Boltz wrote: > Hello, > > this patch improves the user-visible exception handling. > > Instead of always showing a backtrace, > - for AppArmorException (used for profile syntax errors etc.), print only > the exceptions value because a backtrac

Re: [apparmor] Apparmor rules for dconf confinement

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Here's one more pass of the kernel and apparmor patches with all the changes you requested, John. Thanks for your patch, I copied it into the old one nearly verbatim without much trouble. On 2015-06-23 11:44 AM, John Johansen wrote: > On 06/23/201

Re: [apparmor] query_label regression test failures

On Thu, Jun 25, 2015 at 02:57:21PM -0700, Steve Beattie wrote: > On Thu, Jun 25, 2015 at 04:30:46PM -0500, Tyler Hicks wrote: > > On 2015-06-25 13:55:47, Tyler Hicks wrote: > > > On 2015-06-25 01:21:39, Steve Beattie wrote: > > > > Hi, > > > > > > > > When running the apparmor regression tests on

Re: [apparmor] query_label regression test failures

On Thu, Jun 25, 2015 at 04:30:46PM -0500, Tyler Hicks wrote: > On 2015-06-25 13:55:47, Tyler Hicks wrote: > > On 2015-06-25 01:21:39, Steve Beattie wrote: > > > Hi, > > > > > > When running the apparmor regression tests on wily with the trunk of > > > the userspace tools, I'm getting the following

Re: [apparmor] query_label regression test failures

On 2015-06-25 13:55:47, Tyler Hicks wrote: > On 2015-06-25 01:21:39, Steve Beattie wrote: > > Hi, > > > > When running the apparmor regression tests on wily with the trunk of > > the userspace tools, I'm getting the following two failures in the > > query_label test: > > > > Error: query_label fa

[apparmor] [patch] NetworkRule: allow TYPE without DOMAIN

Hello, thanks to a bug in the apparmor.d manpage, NetworkRule rejected rules that contained only TYPE (for example "network stream,"). A bugreport on IRC and some testing with the parser showed that this is actually allowed, so NetworkRule should of course allow it. Note: not strip()ing rule_deta

[apparmor] [patch] Fix NETWORK RULE in apparmor.d manpage

Hello, this patch fixes NETWORK RULE in apparmor.d manpage. It's allowed to only specify a TYPE without specifying a DOMAIN. Also add a missing "]" for QUALIFIERS. [ apparmor.d-fix-network.diff ] === modified file 'parser/apparmor.d.pod' --- parser/apparmor.d.pod 2015-06-12 23:01:55 +00

[apparmor] [patch] Improve user-visible exception handling

Hello, this patch improves the user-visible exception handling. Instead of always showing a backtrace, - for AppArmorException (used for profile syntax errors etc.), print only the exceptions value because a backtrace is superfluous and would confuse users. - for other (unexpected) exceptions

Re: [apparmor] query_label regression test failures

On 2015-06-25 01:21:39, Steve Beattie wrote: > Hi, > > When running the apparmor regression tests on wily with the trunk of > the userspace tools, I'm getting the following two failures in the > query_label test: > > Error: query_label failed. Test 'QUERY file (all base perms #1)' was expected >

[apparmor] query_label regression test failures

Hi, When running the apparmor regression tests on wily with the trunk of the userspace tools, I'm getting the following two failures in the query_label test: Error: query_label failed. Test 'QUERY file (all base perms #1)' was expected to 'pass'. Reason for failure 'FAIL: the access should not b