Re: [apparmor] Question about file_mmap/exec in the case of perl/shell scripts

2019-09-17 Thread Mikhail Morfikov
On 17/09/2019 14:53, Seth Arnold wrote: > On Thu, Sep 12, 2019 at 04:20:22PM +0200, Mikhail Morfikov wrote: >> Shouldn't be here some "x" or "m" permissions, or maybe AppArmor assumes >> this automatically for the confined path, so it's redundant to specify it >> manually? > > Interpreters are

Re: [apparmor] [Merge] ~sdeziel/apparmor-profiles/+git/apparmor-profiles:apt-cacher-ng into apparmor-profiles:master

2019-09-17 Thread Simon Déziel
https://gitlab.com/apparmor/apparmor-profiles/merge_requests/37 -- https://code.launchpad.net/~sdeziel/apparmor-profiles/+git/apparmor-profiles/+merge/372819 Your team AppArmor Developers is requested to review the proposed merge of ~sdeziel/apparmor-profiles/+git/apparmor-profiles:apt-cacher-ng

Re: [apparmor] Question about file_mmap/exec in the case of perl/shell scripts

2019-09-17 Thread Seth Arnold
On Thu, Sep 12, 2019 at 04:20:22PM +0200, Mikhail Morfikov wrote: > Shouldn't be here some "x" or "m" permissions, or maybe AppArmor assumes > this automatically for the confined path, so it's redundant to specify it > manually? Interpreters are handled differently:

Re: [apparmor] [Merge] ~sdeziel/apparmor-profiles/+git/apparmor-profiles:apt-cacher-ng into apparmor-profiles:master

2019-09-17 Thread Simon Déziel
My bad, thanks for catching this ;) I'll head over to gitlab and resubmit. On 2019-09-17 8:43 a.m., Seth Arnold wrote: > The change makes sense to me but I'm not sure if this or > https://gitlab.com/apparmor/apparmor-profiles is the better place to make the > change. > > Thanks > --

Re: [apparmor] [Merge] ~sdeziel/apparmor-profiles/+git/apparmor-profiles:apt-cacher-ng into apparmor-profiles:master

2019-09-17 Thread Seth Arnold
The change makes sense to me but I'm not sure if this or https://gitlab.com/apparmor/apparmor-profiles is the better place to make the change. Thanks -- https://code.launchpad.net/~sdeziel/apparmor-profiles/+git/apparmor-profiles/+merge/372819 Your team AppArmor Developers is requested to