Re: [apparmor] [Contd.] [profile] /etc/cron.daily/logrotate: a couple of DENIED messages.

2016-12-08 Thread Seth Arnold
On Thu, Dec 08, 2016 at 12:52:42PM +0100, daniel curtis wrote: > One more thing; I would like to ask about adding Mr Seth Arnold to > Copyright (C) message, because he helped me a lot with a logrotate profile. > Do you agree? Can I do it? By the way: thank You very much. Nah, there's no need for

[apparmor] [patch] nscd profile: allow reading libvirt/dnsmasq/*.status

2016-12-08 Thread Christian Boltz
Hello, $subject. References: https://bugzilla.opensuse.org/show_bug.cgi?id=1014463 I propose this patch for trunk, 2.10 and 2.9. [ nscd-libvirt.diff ] === modified file 'profiles/apparmor.d/usr.sbin.nscd' --- profiles/apparmor.d/usr.sbin.nscd 2016-11-18 19:17:43 + +++

[apparmor] [profile] netstat(8): plenty of DENIED messages; repeated "target=*" value.

2016-12-08 Thread daniel curtis
Hi Jonh >> if you aren't using ipv6 you should be able to drop them Okay, so I will remove them. And what about rules according to, for example, '@{PROC}/[0-9]*/fd'? Should I use an 'owner' with these rules? I mean: @{PROC}/*/fd/ r, @{PROC}/[0-9]*/fd r, @{PROC}/net r, @{PROC}/net/* r, And so