Hi,
AppArmor support works fine on current sid. Seems to have been the
case since 1.2.1-2, and refined later for non-Linux. Shall we close
this bug?
Cheers,
--
intrigeri
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact list
On Thu, Jan 30, 2014 at 08:26:29PM +0100, Felix Geyer wrote:
> On 22.01.2014 07:27, Guido Günther wrote:
> >> > The postinst, postrm and cron.daily parts of my original patch are also
> >> > desirable.
> >> > For example without the postinst changes the profiles are only loaded
> >> > after a reb
On Thu, Jan 30, 2014 at 01:46:38PM -0600, Jamie Strandboge wrote:
> On 01/30/2014 01:26 PM, Felix Geyer wrote:
> > On 22.01.2014 07:27, Guido Günther wrote:
[..snip..]
> I agree that it is awkward to have them in different places, which is why it
> is
> the way it is now (and has been this way
On 01/30/2014 01:26 PM, Felix Geyer wrote:
> On 22.01.2014 07:27, Guido Günther wrote:
The postinst, postrm and cron.daily parts of my original patch are also
desirable.
For example without the postinst changes the profiles are only loaded
after a reboot.
>> The whole setup cu
On 22.01.2014 07:27, Guido Günther wrote:
>> > The postinst, postrm and cron.daily parts of my original patch are also
>> > desirable.
>> > For example without the postinst changes the profiles are only loaded
>> > after a reboot.
> The whole setup currently has the problem that it doesn't allow
Hi Felix,
On Tue, Jan 21, 2014 at 11:04:06PM +0100, Felix Geyer wrote:
[..snip..]
> I'll have a more detailed look at the differences between the upstream and
> Ubuntu profiles tomorrow to see which parts are upstreamable.
> Would you accept a patch with the necessary profile changes in the meanti
Hi,
On 07.01.2014 17:18, Guido Günther wrote:
> We should at least maintain the common parts upstream then. The include
> mechanism could cater for distro specific changes. We could also
> preprocess these files during build time to fixup path differences like
> we do for init scripts and other st
Hi Felix,
On Sat, Jan 04, 2014 at 08:03:14PM +0100, Felix Geyer wrote:
> Hi,
>
> On 04.01.2014 18:19, Guido Günther wrote:
> > Hi Felix,
> > On Fri, Jan 03, 2014 at 10:58:14PM +0100, Felix Geyer wrote:
> >> I've ported and tested the libvirt AppArmor support from the Ubuntu
> >> package.
> >>
> >
Hi,
On 04.01.2014 18:19, Guido Günther wrote:
> Hi Felix,
> On Fri, Jan 03, 2014 at 10:58:14PM +0100, Felix Geyer wrote:
>> I've ported and tested the libvirt AppArmor support from the Ubuntu package.
>>
>> The only difference in the profiles is this addition to
>> usr.lib.libvirt.virt-aa-helper:
Hi Felix,
On Fri, Jan 03, 2014 at 10:58:14PM +0100, Felix Geyer wrote:
> I've ported and tested the libvirt AppArmor support from the Ubuntu package.
>
> The only difference in the profiles is this addition to
> usr.lib.libvirt.virt-aa-helper:
> /etc/libnl-[0-9]/classid r,
>
> It can be enable
I've ported and tested the libvirt AppArmor support from the Ubuntu package.
The only difference in the profiles is this addition to
usr.lib.libvirt.virt-aa-helper:
/etc/libnl-[0-9]/classid r,
It can be enabled by setting this in /etc/libvirt/qemu.conf:
security_driver = "apparmor"
Cheers,
Fe
On Wed, Oct 02, 2013 at 08:47:18PM -0400, Ben Kibbey wrote:
> On Wed, 2 Oct 2013 18:58:46 +0200, Guido Günther writes:
> > On Tue, Oct 01, 2013 at 08:00:03PM -0400, Ben Kibbey wrote:
> >> Package: libvirt-bin
> >> Version: 0.9.12-11+deb7u1
> >> Severity: wishlist
> >>
> >> Dear Maintainer,
> >>
>
On Wed, 2 Oct 2013 18:58:46 +0200, Guido Günther writes:
> On Tue, Oct 01, 2013 at 08:00:03PM -0400, Ben Kibbey wrote:
>> Package: libvirt-bin
>> Version: 0.9.12-11+deb7u1
>> Severity: wishlist
>>
>> Dear Maintainer,
>>
>> If possible, please build with apparmor support as an alternative to SELin
On Tue, Oct 01, 2013 at 08:00:03PM -0400, Ben Kibbey wrote:
> Package: libvirt-bin
> Version: 0.9.12-11+deb7u1
> Severity: wishlist
>
> Dear Maintainer,
>
> If possible, please build with apparmor support as an alternative to SELinux.
Did you test the build with app armor support in any way yet?
Package: libvirt-bin
Version: 0.9.12-11+deb7u1
Severity: wishlist
Dear Maintainer,
If possible, please build with apparmor support as an alternative to SELinux.
-- System Information:
Debian Release: jessie/sid
APT prefers testing
APT policy: (990, 'testing'), (400, 'unstable')
Architectur
15 matches
Mail list logo
