On Mon, Jun 8, 2015 at 9:28 AM, intrigeri <intrig...@debian.org> wrote: > Control: tag -1 + moreinfo > > Hi, > > <pkg-apparmor team member hat on> > > the proposed confinement profile looks OK to me at first glance. > It's very simple so exceptionally I won't be requesting a review pass > on the AppArmor mailing-list :) And, given the profile is brand new, > flags=(complain) sounds reasonable as a first step. > > Was this profile tested with syndaemon run by GNOME and/or by other > desktop environments?
It was tested both running manually and with gnome-settings-daemon. I looked at debian codesearch for packages that run syndaemon and it yielded (in addition to g-s-d) mate-s-d, cinnamon-s-d, and xfce4-s-d. The former two have the exact same code as g-s-d (they are g-s-d forks) and the xfce4 code has similar options. The main reason I included the flags=(complain) was because syndaemon supports pidfiles in variable locations that I could not possibly guess. No package in Debian makes use of the pidfile option, but users may have custom xinitrc's and whatnot that do use it. Cheers, -- Cameron Norman -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
