Re: [apparmor] RFC: using variables to make profiles more flexible

2017-12-04 Thread John Johansen
On 12/04/2017 10:37 AM, Vincas Dargis wrote: > On 2017-12-04 20:04, John Johansen wrote:>> This would allow user to extend > `@{totem_extra_read_dirs}` for his own use case, maybe ever overwrite (is > this possible?) with `=` instead of `+=`, if he does not like access to > default

Re: [apparmor] [profile] Evince: the lack of "private-files-strict" and a lenient, dangerous rules related to @{HOME} folder.

2017-12-04 Thread Seth Arnold
On Sat, Dec 02, 2017 at 03:40:52PM +, daniel curtis wrote: > Thank You for an answer and sorry for my naive, stupid questions and other > things. Hello Daniel, please don't think your questions are naive or stupid! You just have the luxury of not seeing evince bugs over many years. :) > [1]

Re: [apparmor] test failures in test-aa-easyprof.py

2017-12-04 Thread Tyler Hicks
Hi - Please put me in the To or CC headers next time you directly address me in an email. I don't always have time to read every piece of mail that hits this list and this is a subject that I'd typically skip in those times. On 12/03/2017 08:16 AM, Christian Boltz wrote: > Hello, > > I get

Re: [apparmor] RFC: using variables to make profiles more flexible

2017-12-04 Thread John Johansen
On 12/04/2017 10:16 AM, Vincas Dargis wrote: > On 2017-12-04 19:53, John Johansen wrote: >> On 12/03/2017 04:05 AM, intrigeri wrote: >>> At first glance I would essentially apply the same path structure as >>> what we do for top-level profiles: >>> >>> * `tunables/usr.bin.thunderbird`, shipped

Re: [apparmor] RFC: using variables to make profiles more flexible

2017-12-04 Thread Vincas Dargis
On 2017-12-04 20:04, John Johansen wrote:>> This would allow user to extend `@{totem_extra_read_dirs}` for his own use case, maybe ever overwrite (is this possible?) with `=` instead of `+=`, if he does not like access to default media/mnt/opt/srv paths. sorry no overwriting is currently not

Re: [apparmor] RFC: using variables to make profiles more flexible

2017-12-04 Thread Vincas Dargis
On 2017-12-04 19:53, John Johansen wrote: On 12/03/2017 04:05 AM, intrigeri wrote: At first glance I would essentially apply the same path structure as what we do for top-level profiles: * `tunables/usr.bin.thunderbird`, shipped by the package, has the default settings Oh, I missed

Re: [apparmor] RFC: using variables to make profiles more flexible

2017-12-04 Thread John Johansen
On 12/03/2017 04:05 AM, intrigeri wrote: > Hi, > > Vincas Dargis: >> What about actual implementation, should we "push": > >> * `tunables/usr.bin.thunderbird` empty file (same as with >> local/usr.bin.thunderbird), or >> * `tunables/usr.bin.thunderbird.d` directory for more flexibility, but >>

Re: [apparmor] RFC: using variables to make profiles more flexible

2017-12-04 Thread John Johansen
On 12/03/2017 02:24 AM, Vincas Dargis wrote: > Hi, > > There is a Thunderbird bug [0] about profile not allowing to read > `.thunderbird` for outside of $HOME. > > Currently, Thunderbird profile [1] has quite a few rules for `.thunderbird`: > > ``` >   # per-user thunderbird configuration >  

Re: [apparmor] RFC: using variables to make profiles more flexible

2017-12-04 Thread John Johansen
On 12/03/2017 04:05 AM, intrigeri wrote: > Hi, > > Vincas Dargis: >> What about actual implementation, should we "push": > >> * `tunables/usr.bin.thunderbird` empty file (same as with >> local/usr.bin.thunderbird), or >> * `tunables/usr.bin.thunderbird.d` directory for more flexibility, but >>

Re: [apparmor] test failures in test-aa-easyprof.py

2017-12-04 Thread Christian Boltz
Hello, Am Montag, 4. Dezember 2017, 16:07:52 CET schrieb Jamie Strandboge: > On Sun, 2017-12-03 at 15:16 +0100, Christian Boltz wrote: > > I get several failures from test-aa-easyprof.py, for example > > The "fix" is make -C parser but I'd prefer to have a Makefile > > dependency instead of

Re: [apparmor] test failures in test-aa-easyprof.py

2017-12-04 Thread Jamie Strandboge
On Sun, 2017-12-03 at 15:16 +0100, Christian Boltz wrote: > Hello, > > I get several failures from test-aa-easyprof.py, for example > > = > = > ERROR: test_output_directory_single (__main__.T) > Test output_directory (single) >