Re: [apparmor] [PATCH] tests: Fix exec_stack.sh errors under 4.8 and newer kernels

2016-09-28 Thread Tyler Hicks
On 09/28/2016 09:45 PM, Seth Arnold wrote: > On Wed, Sep 28, 2016 at 09:05:09PM -0500, Tyler Hicks wrote: >> https://launchpad.net/bugs/1628745 >> >> The following upstream kernel commit changed the semantics of the exec >> permission check in the 4.8 kernel: >> >> commit 9f834ec18defc369d73ccf9e8

Re: [apparmor] [PATCH] tests: Fix exec_stack.sh errors under 4.8 and newer kernels

2016-09-28 Thread John Johansen
On 09/28/2016 07:45 PM, Seth Arnold wrote: > On Wed, Sep 28, 2016 at 09:05:09PM -0500, Tyler Hicks wrote: >> https://launchpad.net/bugs/1628745 >> >> The following upstream kernel commit changed the semantics of the exec >> permission check in the 4.8 kernel: >> >> commit 9f834ec18defc369d73ccf9e8

Re: [apparmor] [PATCH] tests: Fix exec_stack.sh errors under 4.8 and newer kernels

2016-09-28 Thread Seth Arnold
On Wed, Sep 28, 2016 at 09:05:09PM -0500, Tyler Hicks wrote: > https://launchpad.net/bugs/1628745 > > The following upstream kernel commit changed the semantics of the exec > permission check in the 4.8 kernel: > > commit 9f834ec18defc369d73ccf9e87a2790bfa05bf46 > Author: Linus Torvalds > Dat

[apparmor] [PATCH] tests: Fix exec_stack.sh errors under 4.8 and newer kernels

2016-09-28 Thread Tyler Hicks
https://launchpad.net/bugs/1628745 The following upstream kernel commit changed the semantics of the exec permission check in the 4.8 kernel: commit 9f834ec18defc369d73ccf9e87a2790bfa05bf46 Author: Linus Torvalds Date: Mon Aug 22 16:41:46 2016 -0700 binfmt_elf: switch to new creds when

Re: [apparmor] [patch] [41/38] let aa-mergeprof ask about new hats and subprofiles

2016-09-28 Thread Steve Beattie
On Wed, Sep 28, 2016 at 11:08:40PM +0200, Christian Boltz wrote: > if a merged profile contains additional hats or subprofiles, the "old" > aa-mergeprof silently created them as additional hasher elements (partly > buggy, because subprofiles would end up as '^/subprofile' instead of > 'profile subp

[apparmor] [patch] [41/38] let aa-mergeprof ask about new hats and subprofiles

2016-09-28 Thread Christian Boltz
Hello, if a merged profile contains additional hats or subprofiles, the "old" aa-mergeprof silently created them as additional hasher elements (partly buggy, because subprofiles would end up as '^/subprofile' instead of 'profile subprofile'). After switching to FileRule, aa-mergeprof crashes on ne

[apparmor] PHP abstraction and PHP 7

2016-09-28 Thread Christian Boltz
Hello, with PHP 7, we'll need to update our PHP abstraction because the paths changed from .../php5/... to .../php7/... Now the interesting questions are: - should php7 get its own abstraction, or should we modify the existing one? - if 'modify', who will explain our users that abstractions/p