Re: [apparmor] [Merge] lp:~cameronnemo/apparmor/abstraction-fdo-applications-fixups into lp:apparmor

2017-07-06 Thread Cameron Norman
Made adjustments suggested -- https://code.launchpad.net/~cameronnemo/apparmor/abstraction-fdo-applications-fixups/+merge/261336 Your team AppArmor Developers is requested to review the proposed merge of lp:~cameronnemo/apparmor/abstraction-fdo-applications-fixups into lp:apparmor. -- AppArmor

Re: [apparmor] [Merge] lp:~elmo/apparmor-profiles/wpa-supplicant into lp:apparmor-profiles

2015-06-08 Thread Cameron Norman
Review: Needs Fixing Some suggestions inline. Diff comments: > === added file 'ubuntu/15.04/sbin.wpa_supplicant' > --- ubuntu/15.04/sbin.wpa_supplicant 1970-01-01 00:00:00 + > +++ ubuntu/15.04/sbin.wpa_supplicant 2015-04-24 19:33:31 + > @@ -0,0 +1,39 @@ > +# Author: James Troup > + >

[apparmor] [Merge] lp:~cameronnemo/apparmor-profiles/pid-variable into lp:apparmor-profiles

2015-06-08 Thread Cameron Norman
Cameron Norman has proposed merging lp:~cameronnemo/apparmor-profiles/pid-variable into lp:apparmor-profiles. Requested reviews: AppArmor Developers (apparmor-dev) For more details, see: https://code.launchpad.net/~cameronnemo/apparmor-profiles/pid-variable/+merge/261400 This replaces a few

[apparmor] [Merge] lp:~cameronnemo/apparmor-profiles/new-geoclue2 into lp:apparmor-profiles

2015-06-08 Thread Cameron Norman
Cameron Norman has proposed merging lp:~cameronnemo/apparmor-profiles/new-geoclue2 into lp:apparmor-profiles. Requested reviews: AppArmor Developers (apparmor-dev) For more details, see: https://code.launchpad.net/~cameronnemo/apparmor-profiles/new-geoclue2/+merge/261398 Add geoclue-2.0

[apparmor] Using @{multiarch} in profile name

2015-06-07 Thread Cameron Norman
have tunables/global included before this profile definition, btw. Thank you, -- Cameron Norman -- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor

[apparmor] [Merge] lp:~cameronnemo/apparmor/abstraction-fdo-applications-fixups into lp:apparmor

2015-06-07 Thread Cameron Norman
Cameron Norman has proposed merging lp:~cameronnemo/apparmor/abstraction-fdo-applications-fixups into lp:apparmor. Requested reviews: AppArmor Developers (apparmor-dev) For more details, see: https://code.launchpad.net/~cameronnemo/apparmor/abstraction-fdo-applications-fixups/+merge/261336

[apparmor] [Merge] lp:~cameronnemo/apparmor/gnome-abstraction into lp:apparmor

2015-06-06 Thread Cameron Norman
Cameron Norman has proposed merging lp:~cameronnemo/apparmor/gnome-abstraction into lp:apparmor. Requested reviews: AppArmor Developers (apparmor-dev) For more details, see: https://code.launchpad.net/~cameronnemo/apparmor/gnome-abstraction/+merge/261320 -- Your team AppArmor Developers is

[apparmor] Working on syndaemon protocol, should pidfiles be supported?

2015-06-06 Thread Cameron Norman
,gnome,xfce4}-settings-daemon) actually employs the pidfile option -- they all monitor the daemon themselves. So I am now thinking it would be best to put it in enforce mode with a "standard" pidfile location ($XDG_RUNTIME_DIR/syndaemon.pid). Thoughts, recommendations? -- Came

Re: [apparmor] [Merge] lp:~cameronnemo/apparmor/dnsmasq-lxc into lp:apparmor

2015-03-30 Thread Cameron Norman
Yeah it seems that the first version had merge conflicts. I pushed to the repo with the overwrite flag and fixed that after I saw it. No idea what the original problem was... I just grabbed a new branch. -- https://code.launchpad.net/~cameronnemo/apparmor/dnsmasq-lxc/+merge/254523 Your team AppA

Re: [apparmor] [patch] update dnsmasq profile

2015-03-29 Thread Cameron Norman
eed to provide for the pid file. The path is /run/lxc/dnsmasq.pid. I have made merge request here that takes these into account. Cheers, -- Cameron Norman -- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor

[apparmor] [Merge] lp:~cameronnemo/apparmor/dnsmasq-lxc into lp:apparmor

2015-03-29 Thread Cameron Norman
Cameron Norman has proposed merging lp:~cameronnemo/apparmor/dnsmasq-lxc into lp:apparmor. Requested reviews: AppArmor Developers (apparmor-dev) For more details, see: https://code.launchpad.net/~cameronnemo/apparmor/dnsmasq-lxc/+merge/254523 Adds the paths for the LXC network setup scripts

Re: [apparmor] [patch] profiles: add mir abstraction

2015-03-05 Thread Cameron Norman
metimes do not have a lib prefix > + # see LP: #1422521 > + /usr/lib/@{multiarch}/mir/*.so* mr, > + /usr/lib/@{multiarch}/mir/**/*.so* mr, I feel like a better solution to this is making the mir libraries actually have a lib prefix. This does not mean that I am against a mir abstraction

[apparmor] [Merge] lp:~cameronnemo/apparmor/ubuntu-email-geary into lp:apparmor

2015-02-22 Thread Cameron Norman
The proposal to merge lp:~cameronnemo/apparmor/ubuntu-email-geary into lp:apparmor has been updated. Description changed to: Adds Geary (https://wiki.gnome.org/Apps/Geary) to the ubuntu-email abstraction. For more details, see: https://code.launchpad.net/~cameronnemo/apparmor/ubuntu-email-geary

[apparmor] [Merge] lp:~cameronnemo/apparmor/ubuntu-email-geary into lp:apparmor

2015-02-22 Thread Cameron Norman
Cameron Norman has proposed merging lp:~cameronnemo/apparmor/ubuntu-email-geary into lp:apparmor. Requested reviews: AppArmor Developers (apparmor-dev) For more details, see: https://code.launchpad.net/~cameronnemo/apparmor/ubuntu-email-geary/+merge/250583 -- Your team AppArmor Developers is

Re: [apparmor] Default deny access to the directory

2015-01-15 Thread Cameron Norman
er/group ownership of the directory: chown _appd:_appd /etc/appd chmod 750 /etc/appd then only root and appd can access that directory. Hopefully that helps. -- Cameron Norman -- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor

Re: [apparmor] [Merge] lp:~intrigeri/apparmor-profiles/gstreamer-abstraction into lp:apparmor-profiles

2014-07-28 Thread Cameron Norman
Regarding the p11kit stuff, I have been working on profiles for a number of gtk3 applications recently and they have all needed it. Maybe it is something in glib that uses it? -- https://code.launchpad.net/~intrigeri/apparmor-profiles/gstreamer-abstraction/+merge/228398 Your team AppArmor Develo

[apparmor] How to confine querying of /proc to /proc/self?

2014-07-24 Thread Cameron Norman
oc/self be accomplished? P.S. please keep me CC'd, as I am not subscribed to this ML currently. Thank you, -- Cameron Norman -- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor