Re: [apparmor] [PATCH 2/4] 0002-aa-easyprof-policy.patch

2012-02-08 Thread Jamie Strandboge
On Wed, 2012-02-08 at 01:21 +0100, Christian Boltz wrote: > > The more important question: What about the second half of my mail? Let > me re-insert it: > > > > You should also allow to create ~/.cache, ~/.config ~/.local and > > > ~/.local/share (in other words: include abstractions/xdg-deskto

Re: [apparmor] [PATCH 2/4] 0002-aa-easyprof-policy.patch

2012-02-07 Thread Christian Boltz
Hello, Am Dienstag, 7. Februar 2012 schrieb Jamie Strandboge: > On Tue, 2012-02-07 at 16:50 +0100, Christian Boltz wrote: > > Is the "l" permission really needed for /opt? > > Maybe? I thought it conceivable that applications might have their own > tmp directory in /opt which is why I added 'l'

Re: [apparmor] [PATCH 2/4] 0002-aa-easyprof-policy.patch

2012-02-07 Thread Jamie Strandboge
On Tue, 2012-02-07 at 16:50 +0100, Christian Boltz wrote: > Hello, > > Am Dienstag, 7. Februar 2012 schrieb Jamie Strandboge: > > diff -Naurp -x .bzr -x common > > apparmor-trunk/utils/easyprof/policygroups/opt-application > > apparmor-trunk-easyprof/utils/easyprof/policygroups/opt-application >

Re: [apparmor] [PATCH 2/4] 0002-aa-easyprof-policy.patch

2012-02-07 Thread Christian Boltz
Hello, Am Dienstag, 7. Februar 2012 schrieb Jamie Strandboge: > diff -Naurp -x .bzr -x common > apparmor-trunk/utils/easyprof/policygroups/opt-application > apparmor-trunk-easyprof/utils/easyprof/policygroups/opt-application > --- apparmor-trunk/utils/easyprof/policygroups/opt-application 1969-

[apparmor] [PATCH 2/4] 0002-aa-easyprof-policy.patch

2012-02-07 Thread Jamie Strandboge
On Tue, 2012-02-07 at 08:50 -0600, Jamie Strandboge wrote: > This patchset is to accomplish the code portion of the > security-p-app-isolation blueprint. aa-easyprof is a standalone CLI > application which can also be imported into developer SDKs. From the man > page: ... > * 0002-aa-easyprof-polic