Re: [systemd-devel] [PATCH] Add AppArmor profile switching

2014-02-21 Thread Lennart Poettering
On Fri, 21.02.14 09:39, Michael Scherer (m...@zarb.org) wrote: > > Applied! I made some changes though, there were some missing > > bits to make sure the config hookup works correctly. I don't have any > > apparmor available though. Could you check if everything works > > correctly? > > I will, I

Re: [systemd-devel] [PATCH] Add AppArmor profile switching

2014-02-21 Thread intrigeri
Hi, Michael Scherer wrote (21 Feb 2014 08:39:12 GMT) : > Le vendredi 21 février 2014 à 03:48 +0100, Lennart Poettering a écrit : >> I don't have any apparmor available though. Could you check if >> everything works correctly? > I will, I do have a opensuse VM for that, and I think intrigeri in CC

Re: [systemd-devel] [PATCH] Add AppArmor profile switching

2014-02-21 Thread Michael Scherer
Le vendredi 21 février 2014 à 03:48 +0100, Lennart Poettering a écrit : > On Thu, 20.02.14 16:19, m...@zarb.org (m...@zarb.org) wrote: > > > From: Michael Scherer > > > > This permit to switch to a specific apparmor profile when starting a > > daemon. This > > will result in a non operation if

Re: [systemd-devel] [PATCH] Add AppArmor profile switching

2014-02-20 Thread Lennart Poettering
On Thu, 20.02.14 16:19, m...@zarb.org (m...@zarb.org) wrote: > From: Michael Scherer > > This permit to switch to a specific apparmor profile when starting a daemon. > This > will result in a non operation if apparmor is disabled. > It also add a new build requirement on libapparmor for using t

[systemd-devel] [PATCH] Add AppArmor profile switching, v3

2014-02-20 Thread misc
3rd version of the patch, taking in account the feedback from Lennart. See http://lists.freedesktop.org/archives/systemd-devel/2014-January/015975.html and http://lists.freedesktop.org/archives/systemd-devel/2014-February/016916.html for details ___ s

[systemd-devel] [PATCH] Add AppArmor profile switching

2014-02-20 Thread misc
From: Michael Scherer This permit to switch to a specific apparmor profile when starting a daemon. This will result in a non operation if apparmor is disabled. It also add a new build requirement on libapparmor for using this feature. --- Makefile.am | 2 ++ configure

Re: [systemd-devel] [PATCH] Add AppArmor profile switching

2014-02-14 Thread Lennart Poettering
On Fri, 14.02.14 14:05, Michael Scherer (m...@zarb.org) wrote: > > > SD_BUS_PROPERTY("SELinuxContext", "s", NULL, > > > offsetof(ExecContext, selinux_context), SD_BUS_VTABLE_PROPERTY_CONST), > > > +SD_BUS_PROPERTY("AppArmorProfile", "s", NULL, > > > offsetof(ExecContext, apparmor

Re: [systemd-devel] [PATCH] Add AppArmor profile switching

2014-02-14 Thread Michael Scherer
Le vendredi 14 février 2014 à 14:05 +0100, Michael Scherer a écrit : > Le vendredi 14 février 2014 à 12:31 +0100, Lennart Poettering a écrit : > > On Fri, 14.02.14 12:21, Michael Scherer (m...@zarb.org) wrote: > > > SD_BUS_PROPERTY("SELinuxContext", "s", NULL, > > > offsetof(ExecContext,

Re: [systemd-devel] [PATCH] Add AppArmor profile switching

2014-02-14 Thread Michael Scherer
Le vendredi 14 février 2014 à 12:31 +0100, Lennart Poettering a écrit : > On Fri, 14.02.14 12:21, Michael Scherer (m...@zarb.org) wrote: > > > This permit to switch to a specific apparmor profile when starting a > > daemon. This > > will result in a non operation if apparmor is disabled. > > It a

Re: [systemd-devel] [PATCH] Add AppArmor profile switching

2014-02-14 Thread Lennart Poettering
On Fri, 14.02.14 12:21, Michael Scherer (m...@zarb.org) wrote: > This permit to switch to a specific apparmor profile when starting a daemon. > This > will result in a non operation if apparmor is disabled. > It also add a new build requirement on libapparmor for using this feature. > --- > Make

[systemd-devel] [PATCH] Add AppArmor profile switching

2014-02-14 Thread Michael Scherer
This permit to switch to a specific apparmor profile when starting a daemon. This will result in a non operation if apparmor is disabled. It also add a new build requirement on libapparmor for using this feature. --- Makefile.am | 7 +++ configure.ac