Re: [apparmor] AppArmor profile: requested_mask and denied_mask = "c", "x".

2015-12-21 Thread daniel curtis
Hi John. Okay, now it is more understandable. I will try to modify my AppArmor profile and see what's going to happen etc. If I will have any problems or questions, I will write a message. You asked what I am trying to achieve with my policy. So, I just want to make a profile for a

Re: [apparmor] AppArmor profile: requested_mask and denied_mask = "c", "x".

2015-12-19 Thread daniel curtis
​Hi Christian, So, if "c" means create file/directory then if AppArmor audit entries (for example from log files etc.) contains something like this: operation="mkdir", requested_mask="c", denied_mask="c" Then, rule in an AppArmor application profile should look like: /home/user/.app/ w, Am I

Re: [apparmor] AppArmor profile: requested_mask and denied_mask = "c", "x".

2015-12-19 Thread John Johansen
On 12/19/2015 10:27 AM, daniel curtis wrote: > > ​Hi Christian, > > So, if "c" means create file/directory then if AppArmor audit > entries (for example from log files etc.) contains something like > this: > > operation="mkdir", requested_mask="c", denied_mask="c" > > Then, rule in an AppArmor

Re: [apparmor] AppArmor profile: requested_mask and denied_mask = "c", "x".

2015-12-18 Thread Christian Boltz
Hello, Am Freitag, 18. Dezember 2015 schrieb daniel curtis: > I would like to ask about AppArmor profile and a system log files > such as, for example, /var/log/syslog etc. Let say, that I wrote a > profile for an application, which 'audit' entries in log files > contains something like this (of