Re: [apparmor] [PATCH 32/32] apparmor: Fix quieting of audit messages for network mediation

2013-01-31 Thread John Johansen
On 01/31/2013 05:44 PM, Seth Arnold wrote: > On Wed, Jan 16, 2013 at 01:29:01PM -0800, John Johansen wrote: >> From: John Johansen >> >> If a profile specified a quieting of network denials for a given rule by >> either the quiet or deny rule qualifiers, the resultant quiet mask for >> denied requ

Re: [apparmor] [PATCH 25/32] apparmor: Add interface files for profiles and namespaces

2013-01-31 Thread John Johansen
On 01/31/2013 04:18 PM, Seth Arnold wrote: > On Wed, Jan 16, 2013 at 01:28:54PM -0800, John Johansen wrote: >> Add basic interface files to access namespace and profile information. >> The interface files are created when a profile is loaded and removed >> when the profile or namespace is removed.

Re: [apparmor] [PATCH 32/32] apparmor: Fix quieting of audit messages for network mediation

2013-01-31 Thread Seth Arnold
On Wed, Jan 16, 2013 at 01:29:01PM -0800, John Johansen wrote: > From: John Johansen > > If a profile specified a quieting of network denials for a given rule by > either the quiet or deny rule qualifiers, the resultant quiet mask for > denied requests was applied incorrectly, resulting in two po

Re: [apparmor] [PATCH 30/32] apparmor: update compatibility patch for RCU locking

2013-01-31 Thread Seth Arnold
On Wed, Jan 16, 2013 at 01:28:59PM -0800, John Johansen wrote: > Signed-off-by: John Johansen Acked-by: Seth Arnold signature.asc Description: Digital signature -- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/app

Re: [apparmor] [PATCH 26/32] apparmor: fix fully qualified name parsing

2013-01-31 Thread John Johansen
On 01/31/2013 05:11 PM, Seth Arnold wrote: > On Wed, Jan 16, 2013 at 01:28:55PM -0800, John Johansen wrote: >> currently apparmor name parsing is only correctly handling >> :: >> >> but >> ::// >> >> is also a valid form and what is exported to userspace. >> >> Signed-off-by: John Johansen >> ---

Re: [apparmor] [PATCH 27/32] apparmor: add an optional profile attachment string

2013-01-31 Thread Seth Arnold
On Wed, Jan 16, 2013 at 01:28:56PM -0800, John Johansen wrote: > Add the ability to take in a report a human readable profile attachment > string. > > Signed-off-by: John Johansen Acked-By: Seth Arnold signature.asc Description: Digital signature -- AppArmor mailing list AppArmor@lists.ubunt

Re: [apparmor] [PATCH 26/32] apparmor: fix fully qualified name parsing

2013-01-31 Thread Seth Arnold
On Wed, Jan 16, 2013 at 01:28:55PM -0800, John Johansen wrote: > currently apparmor name parsing is only correctly handling > :: > > but > ::// > > is also a valid form and what is exported to userspace. > > Signed-off-by: John Johansen > --- > security/apparmor/lib.c |6 -- > 1 file c

Re: [apparmor] [PATCH 25/32] apparmor: Add interface files for profiles and namespaces

2013-01-31 Thread Seth Arnold
On Wed, Jan 16, 2013 at 01:28:54PM -0800, John Johansen wrote: > Add basic interface files to access namespace and profile information. > The interface files are created when a profile is loaded and removed > when the profile or namespace is removed. > > Signed-off-by: John Johansen > /** > + *

Re: [apparmor] abstraction/X doesnt have Xdefaults included?

2013-01-31 Thread Christian Boltz
Hello, Am Mittwoch, 30. Januar 2013 schrieb Seth Arnold: > I don't think it's necessary to add ~/.Xdefaults to the X abstraction > -- afterall, the file is typically read once at session startup by > xrdb(1) and then never read again -- unless the user runs xrdb -merge > by hand. Are you sure? ;-

Re: [apparmor] [PATCH 23/32] apparmor: provide the ability to boot with a default profile set on init

2013-01-31 Thread John Johansen
On 01/30/2013 10:59 PM, Seth Arnold wrote: > On Wed, Jan 30, 2013 at 10:27:49PM -0800, Seth Arnold wrote: >>> - /* unconfined profiles don't have a mode string appended */ >>> - if (!unconfined(profile)) >>> + /* 'unconfined' profile don't have a mode string appended */ >>> + unconfined = u

Re: [apparmor] [PATCH 24/32] apparmor: allow setting any profile into the unconfined state

2013-01-31 Thread John Johansen
On 01/30/2013 11:01 PM, Seth Arnold wrote: > On Wed, Jan 16, 2013 at 01:28:53PM -0800, John Johansen wrote: >> Allow emulating the default profile behavior from boot, by allowing >> loading of a profile in the unconfined state into a new NS. >> >> Signed-off-by: John Johansen > >> @@ -198,7 +198,

Re: [apparmor] abstraction/X doesnt have Xdefaults included?

2013-01-31 Thread Aaron Lewis
Hi Seth, I did see chromium request a read mark on that file, but logs not available as I never store them on disk (just in memory) I'll let you know when a line is available. Thanks for the reply! On 17:19 Wed 30 Jan , Seth Arnold wrote: > On Mon, Jan 28, 2013 at 07:45:55AM +0800, Aaron L