Control: tag -1 + upstream
Hi Simon,
let's discuss and polish the patch here, and them I can deal with
upstreaming it.
> Please consider these new rules for /{usr/,}bin/ping:
Thanks!
> /etc/libnl*/** r,
For the dnsmasq profile we have:
/etc/libnl-3/classid r,
Presumably, this would be enough for ping as well. Maybe this would be
more future-proof though:
/etc/libnl-*/classid r,
What do you think?
> @{PROC}/@{pid}/net/psched r,
OK, this makes sense to me.
> The rule for psched can't use "owner" because fsuid != ouid.
Confirmed.
> which address these AppArmor complaints:
Just curious, how can I trigger them locally?
Cheers,
--
intrigeri
