Re: Flatpak and apparmor.

On 4/7/19 5:45 PM, David Wright wrote: >> On 4/7/19 10:20 AM, didier gaumet wrote: >>> Disclaimer: I have never used Apparmor nor SELinux, > > Ditto. I've only explored the Debian profile for evince in order to see > how it's possible to click on a link and call a program that's run via > a wra

Re: Flatpak and apparmor.

Hi. On Sun, Apr 07, 2019 at 04:59:41PM +0300, Georgios wrote: > Thanks for your help! > > So flatpak and apparmor are not compatible. So it seems so far. I haven't looked at bwrap code, it's possible they set some Apparmor policy there (LXC does it, for instance).

Re: Flatpak and apparmor.

> On 4/7/19 10:20 AM, didier gaumet wrote: > > Disclaimer: I have never used Apparmor nor SELinux, Ditto. I've only explored the Debian profile for evince in order to see how it's possible to click on a link and call a program that's run via a wrapper that sets PYTHONPATH, GUILE_LOAD_PATH and LD_L

Re: Flatpak and apparmor.

Thanks for your help! So flatpak and apparmor are not compatible. Well what about selinux? I was thinking moving from apparmor to selinux sooner or later but I already had a working system that I didn't want to mess. If selinux is supported I guess I should consider making the trans

Re: Flatpak and apparmor.

Hi. On Sat, Apr 06, 2019 at 09:30:11PM +0300, Georgios wrote: > I would like to know how i can set up an apparmor profile of a > application i run through flatpak. It seems impossible. For instance, I've executed: flatpak install flathub com.dosbox.DOSBox Along with the new whole root

Re: Flatpak and apparmor.

Thanks for your reply. I'm using apparmor the last 2 years and I made my own profiles for my applications. The problem I'm having is that since flatpak is a bit different i do not have any idea how to combine it with apparmor or if its even possible. On 4/7/19 10:20 AM, didier gaumet wrote: >

Re: Flatpak and apparmor.

Hello, Disclaimer: I have never used Apparmor nor SELinux, I only just installed Apparmor on Stretch because it will be enabled by default on new installations of Buster and I want my future migration result to be like a new install. I would surmise (even if I am not sure of it) that Apparmor p

Flatpak and apparmor.

Hi! I would like to know how i can set up an apparmor profile of a application i run through flatpak. For example. Lets say i have installed libreoffice through flatpak. In order to start it I must run "flatpak run org.libreoffice.LibreOffice --writer" How do i set up a profile with aa-genprof