Re: [apparmor] apparmor with large profile set

2023-07-19 Thread John Johansen
On 7/18/23 03:12, Alexandre Pujol wrote: Hi, On 18/07/2023 03:02, Seth Arnold wrote: > What exactly do you mean with "the doc"? The wiki has a lot of syntax > and semantics around future expansion plans and I've seen dozens, if not > hundreds, of questions from people who found it and tried t

Re: [apparmor] apparmor with large profile set

2023-07-18 Thread Alexandre Pujol
Hi, On 18/07/2023 03:02, Seth Arnold wrote: > What exactly do you mean with "the doc"? The wiki has a lot of syntax > and semantics around future expansion plans and I've seen dozens, if not > hundreds, of questions from people who found it and tried to use it on > live systems, without success.

Re: [apparmor] apparmor with large profile set

2023-07-17 Thread John Johansen
On 7/17/23 16:28, Alexandre Pujol wrote: Hi, << snip >> I am attaching the systemd logs for more details: without apparmor [4] and, with apparmor [5] enabled. They have been generated on an Archlinux based VM made with [6]. The VM can be generated as detailed in [7]. so there are a coupl

Re: [apparmor] apparmor with large profile set

2023-07-17 Thread John Johansen
On 7/17/23 16:28, Alexandre Pujol wrote: Hi, Following a conversation I had with John a few months ago at the LSS-NA. Here is a (non-exhaustive) list of things that are useful when working on large profiles set [0]. For more context, you can find my talk to LSS-NA [1] and the slide [2]. I kn

Re: [apparmor] apparmor with large profile set

2023-07-17 Thread Seth Arnold
On Tue, Jul 18, 2023 at 12:28:09AM +0100, Alexandre Pujol wrote: > Updating the doc to clearly show what is already implemented and what is > planned would be nice too. What exactly do you mean with "the doc"? The wiki has a lot of syntax and semantics around future expansion plans and I've seen d

[apparmor] apparmor with large profile set

2023-07-17 Thread Alexandre Pujol
Hi, Following a conversation I had with John a few months ago at the LSS-NA. Here is a (non-exhaustive) list of things that are useful when working on large profiles set [0]. For more context, you can find my talk to LSS-NA [1] and the slide [2]. I know they may have been work already in the