Hi,
I'm looking for information/collaborators to teach libexplain about
apparmor, so that the error messages can explain what apparmor policy
they have run afoul of.
I ran into a weird one today where I got "I/O error" when reading from a
cdrom that apparmor took exception to, according to syslog. I still
have no idea why.
Feb 12 15:56:51 hawk kernel: [1135895.753820] type=1400
audit(1329022611.501:167): apparmor="DENIED" operation="open"
parent=1 profile="/usr/bin/evince" name="/run/udev/data/b11:0"
pid=30378 comm="evince" requested_mask="r" denied_mask="r"
fsuid=1000 ouid=0
When I copied the cdrom into an iso file (no I/O error), and loopback
mounted it, apparmor did not take exception to it. WTF?
So, if you know of good resources about apparmor from the API side
rather than the policy config side, I'd appreciate some URLs. If you
would like to help with some code, that would be good, too.
--
Peter Miller <pmil...@opensource.org.au>
_______________________________________________
coders mailing list
coders@slug.org.au
http://lists.slug.org.au/listinfo/coders
