Bug#843461: apparmor: Support usrmerge

2017-01-17 Thread intrigeri
hi, intrigeri: > here's a status update. And another one :) > tl;dr: almost everything is done or waiting to migrate to testing; There's been a bit of progress since then. > there's one question for Ulrike below, That's still the case (I think that Icedove is the only thing left to take care

Bug#843461: apparmor: Support usrmerge

2017-01-06 Thread intrigeri
Hi, here's a status update. tl;dr: almost everything is done or waiting to migrate to testing; there's one question for Ulrike below, and one topic (telepathy-mission-control-5) about which I'd appreciate some input from you folks. I'll keep this bug open until everything is fixed at least in

Bug#843461: apparmor: Support usrmerge

2016-12-05 Thread intrigeri
Hi, intrigeri: > I've started with the policy included in the upstream AppArmor main > bzr repo: > https://code.launchpad.net/~intrigeri/apparmor/usrmerge/+merge/312409 I'm now running sid + usrmerge + the content of this merge request on my main system. So far, so good! > I'll now go on with:

Bug#843461: apparmor: Support usrmerge

2016-12-03 Thread intrigeri
Hi, Christian Boltz: >> Besides, they significantly increase policy compilation time. > I never benchmarked that - do you have some numbers? I can't easily find them (we were discussing this privately with jjohansen a few years ago). >> So the only option I can think of is going through all

Bug#843461: apparmor: Support usrmerge

2016-11-08 Thread Christian Boltz
Hello, Am Dienstag, 8. November 2016, 15:06:50 CET schrieb intrigeri: > Christian: did OpenSUSE go through something like usrmerge? If you > did, how did you handle it? openSUSE moved lots of binaries, but not all from /{s,}bin/ to /usr/{s,}bin/ > Besides, they > significantly increase policy

Bug#843461: apparmor: Support usrmerge

2016-11-08 Thread intrigeri
Hi! Felix Geyer: > For stretch we need to support usrmerge and non-usrmerge systems. Right, good catch! Christian: did OpenSUSE go through something like usrmerge? If you did, how did you handle it? (I'm assuming that Ubuntu didn't do it yet.) > We can add something like this to the default

Bug#843461: apparmor: Support usrmerge

2016-11-06 Thread Felix Geyer
Package: apparmor Version: 2.10.95-5 For stretch we need to support usrmerge and non-usrmerge systems. We can add something like this to the default tunables: alias /bin/ -> /usr/bin/, alias /sbin/ -> /usr/sbin/, alias /lib/ -> /usr/lib/, alias /lib32/ -> /usr/lib32/, alias /lib64/ ->