Re: [apparmor] [patch] Update the sshd profile

2016-01-07 Thread Simon Deziel
Hi, On 2016-01-06 12:12 PM, Christian Boltz wrote: > Am Mittwoch, 6. Januar 2016 schrieb Simon Deziel: >> On 2016-01-02 09:38 AM, Christian Boltz wrote: >>> the sshd profile was bitrotting for a while and denies several >>> permissions that are needed for a successful ssh login (see the >>> patch

Re: [apparmor] [patch] Raise AppArmorBug on unknown request_mask in logparser.py

2016-01-07 Thread Christian Boltz
Hello, Am Donnerstag, 7. Januar 2016 schrieb Steve Beattie: > On Sat, Dec 12, 2015 at 01:39:25AM +0100, Christian Boltz wrote: ... > > (yes, I tested this before sending the patch ;-) > > Sigh, yet another difference in behavior between python2 and python3. > > For python2, this happens when

Re: [apparmor] [PATCH v2 4/5] Makefile: Add coverity target

2016-01-07 Thread Tyler Hicks
On 2016-01-06 20:44:46, Tyler Hicks wrote: > Add a target that uses cov-build, which must be found in $PATH, to > generate an intermediate Coverity directory. The intermediate Coverity > directory will be based on a clean snapshot of the last commit in the > bzr tree. Finally, the intermediate

Re: [apparmor] [PATCH v2 2/5] common: Simplify REPO_VERSION_CMD in Make.rules

2016-01-07 Thread Tyler Hicks
On 2016-01-07 16:46:03, Christian Boltz wrote: > Hello, > > Am Mittwoch, 6. Januar 2016 schrieb Tyler Hicks: > > bzr version-info supports directly printing the bare revno to stdout > > so we should use that instead of parsing the default verbose output. > > > > This change simplifies the shell

Re: [apparmor] [patch] Update the sshd profile

2016-01-07 Thread Seth Arnold
On Thu, Jan 07, 2016 at 08:33:38PM -0500, Simon Deziel wrote: > > BTW: DBUS support in SSH? I didn't even imagine it could be there ;-) > > Any hints what it does? > > That's the first thing I tripped on when enabling the profile in 14.04. > > Upon connection, it sends a Hello to

Re: [apparmor] [patch] Fix handling of link events in aa-logprof

2016-01-07 Thread Christian Boltz
Hello, Am Donnerstag, 7. Januar 2016 schrieb Seth Arnold: > On Thu, Jan 07, 2016 at 08:53:11PM +0100, Christian Boltz wrote: > > Fortunately the fix is easy - delete the code with the special > > handling for 'l' events, and the remaining code that handles other > > file permissions just works

[apparmor] [patch] Add some simple_tests (dbus and bare file rules)

2016-01-07 Thread Christian Boltz
Hello, $subject ;-) [ more-simple_tests.diff ] === added file 'parser/tst/simple_tests/dbus/ok_bind_2.sd' --- parser/tst/simple_tests/dbus/ok_bind_2.sd 1970-01-01 00:00:00 + +++ parser/tst/simple_tests/dbus/ok_bind_2.sd 2015-10-27 22:55:01 + @@ -0,0 +1,7 @@ +# +#=DESCRIPTION simple

Re: [apparmor] [patch] Fix handling of link events in aa-logprof

2016-01-07 Thread Seth Arnold
On Thu, Jan 07, 2016 at 08:53:11PM +0100, Christian Boltz wrote: > Fortunately the fix is easy - delete the code with the special handling > for 'l' events, and the remaining code that handles other file > permissions just works :-) > aa-logprof -f <( echo 'Jan 7 03:11:24 mail kernel:

[apparmor] [Merge] lp:~sdeziel/apparmor-profiles/refresh-pulseaudio into lp:apparmor-profiles

2016-01-07 Thread Simon Déziel
Simon Déziel has proposed merging lp:~sdeziel/apparmor-profiles/refresh-pulseaudio into lp:apparmor-profiles. Requested reviews: AppArmor Developers (apparmor-dev) For more details, see: https://code.launchpad.net/~sdeziel/apparmor-profiles/refresh-pulseaudio/+merge/281910 -- Your team

Re: [apparmor] [Merge] lp:~sdeziel/apparmor-profiles/refresh-pulseaudio into lp:apparmor-profiles

2016-01-07 Thread Seth Arnold
On Thu, Jan 07, 2016 at 06:21:23PM -, Simon Déziel wrote: > - /run/pulse/ rw, > - /run/pulse/.pulse-cookie rwk, > - /run/pulse/dbus-socket rwk, > - /run/pulse/native rwk, > - /run/pulse/pid rwk, > + owner /run/pulse/ rw, > + owner /run/pulse/.pulse-cookie rwk, > + owner

Re: [apparmor] [patch] Add some simple_tests (dbus and bare file rules)

2016-01-07 Thread Steve Beattie
On Thu, Jan 07, 2016 at 09:54:40PM +0100, Christian Boltz wrote: > [ more-simple_tests.diff ] > > === added file 'parser/tst/simple_tests/dbus/ok_bind_2.sd' > --- parser/tst/simple_tests/dbus/ok_bind_2.sd 1970-01-01 00:00:00 + > +++ parser/tst/simple_tests/dbus/ok_bind_2.sd 2015-10-27

Re: [apparmor] [patch] Add some simple_tests (dbus and bare file rules)

2016-01-07 Thread Christian Boltz
Hello, Am Donnerstag, 7. Januar 2016 schrieb Steve Beattie: > On Thu, Jan 07, 2016 at 09:54:40PM +0100, Christian Boltz wrote: > > [ more-simple_tests.diff ] > > > > === added file 'parser/tst/simple_tests/dbus/ok_bind_2.sd' > > --- parser/tst/simple_tests/dbus/ok_bind_2.sd 1970-01-01 00:00:00