A bare pivot_root rule would be acceptable to add to the unconfined template. We probably wouldn't want to add a bare change_profile rule to the template but could possibly add a set of rules that allow change_profile to anything except for "unconfined".
Another option would be to create a new template that allows a bare change_profile rule. Christopher is currently investigating the option of shipping the Libertine Manager UI as a deb, instead of a click, so we may not need to adjust the template for these two sets of rules if that provides a viable path forward. ** Summary changed: - Need "pivot_root" and "change_profile" exceptions for the unconfined temple + Need "pivot_root" and "change_profile" exceptions for the unconfined template -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1609919 Title: Need "pivot_root" and "change_profile" exceptions for the unconfined template To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1609919/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
