[systemd-devel] Apparmor profile switching support, v2

2014-02-14 Thread Michael Scherer
This patch implement a option AppArmorProfile to load a specific profile for a service, following the previous SELinux patch for SELinuxProfile configuration. It also follow the same convention of being non-fatal if prefixed by -. I tested it on Opensuse only for now, and the profile still need to

Re: [systemd-devel] Apparmor profile switching support

2014-01-05 Thread Zbigniew Jędrzejewski-Szmek
On Fri, Jan 03, 2014 at 05:58:46PM +0100, Michael Scherer wrote: > Le vendredi 03 janvier 2014 à 17:22 +0100, [email protected] a écrit : > > As discussed on the SELinux thread, this patch attempt to offer the same > > level of configuration for Apparmor distributions by permitting to the > > sysadmin

Re: [systemd-devel] Apparmor profile switching support

2014-01-03 Thread Michael Scherer
Le vendredi 03 janvier 2014 à 17:22 +0100, [email protected] a écrit : > As discussed on the SELinux thread, this patch attempt to offer the same > level of configuration for Apparmor distributions by permitting to the > sysadmin to set the profile used by a unit. I didn't tested it but would > like t

[systemd-devel] Apparmor profile switching support

2014-01-03 Thread misc
As discussed on the SELinux thread, this patch attempt to offer the same level of configuration for Apparmor distributions by permitting to the sysadmin to set the profile used by a unit. I didn't tested it but would like to get early feedback on it from openSUSE and Ubuntu users, as they are the