Re: [apparmor] [patch] Rename global variable "pid" to "log_pid"

2017-01-28 Thread John Johansen
On 01/28/2017 04:23 PM, Christian Boltz wrote: > Hello, > > aa.py has a global variable "pid", but it also has several functions > that use "pid" as a local variable name. do_logprof_pass() even uses > both - first, it passes the global variable to ReadLog, and then it > creates a local variable i

[apparmor] [patch] Rename global variable "pid" to "log_pid"

2017-01-28 Thread Christian Boltz
Hello, aa.py has a global variable "pid", but it also has several functions that use "pid" as a local variable name. do_logprof_pass() even uses both - first, it passes the global variable to ReadLog, and then it creates a local variable in the "for pid in ..." loop. This patch renames the global

[apparmor] [patch] Dovecot profile: change Px to mrPx for /usr/lib/dovecot/*

2017-01-28 Thread Christian Boltz
Hello, some of the /usr/lib/dovecot/* rules already have mrPx permissions, while others don't. With a more recent kernel, I noticed that at least auth, config, dict, lmtp, pop3 and ssl-params need mrPx instead of just Px (confirmed by the audit.log and actual breakage caused by the missing mr per

[apparmor] [profile] Firefox: DENIED "m" access to /home/user/.nv folder.

2017-01-28 Thread daniel curtis
Hi Seth Thank You for helping me and for explanation. I'm thinking about three ways to handle the whole situation; 1) add "lsb_release" child profile (which You provided) to my Firefox profile and of course make it works on my system etc., 2) ignore the whole thing - I mean DENIED entry in the l