Re: [arch-general] AppArmor support

2018-09-21 Thread Gus
On 2018-09-20 18:42, David Runge wrote: On 2018-09-14 12:21:26 (+0200), Geo Kozey wrote: They called it 'binmerge' :) Hope this can be achieved for all profiles. https://gitlab.com/apparmor/apparmor/commit/4200932d8fb31cc3782d96dd8312511e807fd09b I think this should fix issues with referenci

Re: [arch-general] AppArmor support

2018-09-09 Thread Gus
But I have a question: why was AUDIT enabled in the first place? I thought it was cosidered useless? AFAIK, it was considered slow (at least for syscalls), but after recent changes in kernel it doesn't matter anymore. You can read discussion here https://bugs.archlinux.org/task/42954

Re: [arch-general] AppArmor support

2018-09-09 Thread Gus
ist, doesn't we? [1] https://git.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/linux&id=c75a915313f72924fa0a3ed45356f9e0ea488f3b On 2018-09-09 18:24, Maksim Fomin via arch-general wrote: ‐‐‐ Original Message ‐‐‐ On Sunday, 9 September 2018 17:34, Gus wrote: > You

Re: [arch-general] AppArmor support

2018-09-09 Thread Gus
You have been rejected by heftig and tpowa. It is unclear why and what you are asking here. It was accepted first and then rejected by heftig. Suppose AppArmour does not require linking. So what? As heftig wrote, that was main reason for rejecting SELinux and AppArmor support, but since it doe

Re: [arch-general] AppArmor support

2018-09-09 Thread Gus
Linux-hardened doesn't support hibernation and i think it's overkill to use it on desktop. On 2018-09-09 14:04, Filipe Laíns via arch-general wrote: On Sun, 2018-09-09 at 13:42 +, Gus wrote: I know such request was rejected here https://bugs.archlinux.org/task/59733 recently,

[arch-general] AppArmor support

2018-09-09 Thread Gus
I know such request was rejected here https://bugs.archlinux.org/task/59733 recently, but still AppArmor doesn't need linking with libraries and doesn't require as much userland support as SELinux, so it will not hurt to have one option enabled in kernel, right?