1. 25 Feb, 2018 4 commits
  2. 24 Jan, 2018 2 commits
  3. 21 Jan, 2018 15 commits
  4. 19 Jan, 2018 4 commits
  5. 18 Jan, 2018 5 commits
    • Vincas Dargis's avatar
      Merge branch 'apparmor-profiles-could-be-better+832984' into 'debian/master' · ad2adbdb
      Vincas Dargis authored
      Apparmor profiles could be better+832984
      
      See merge request apparmor-team/apparmor!1
      ad2adbdb
    • intrigeri's avatar
      866c2ef8
    • intrigeri's avatar
      apparmor-profile: make it clear in the package description that these profiles... · ba378d6c
      intrigeri authored
      apparmor-profile: make it clear in the package description that these profiles cannot be expected to work out-of-the-box.
      ba378d6c
    • intrigeri's avatar
      apparmor: drop Suggests: apparmor-profile. · 5996b480
      intrigeri authored
      apparmor-profile ships two kinds of profiles:
      
       - Some that are quite close to be usable on Debian but are not tested enough,
         are often broken, and are therefore shipped in complain mode, which has
         a number of important drawbacks; for example deny rules are silently enforced
         even in complain mode; it also tends to confuse users: they see an "ALLOWED"
         log line about every problem the profile would cause if it was enforced, and
         then they report a bug. See https://bugs.debian.org/830502#25 for another
         list of drawbacks. It's not clear that it's a good idea at all to ship these
         profiles in /etc anyway: #830502
      
       - Some that are very unlikely to work as-in on Debian
         → /usr/share/doc/apparmor-profiles/extras/
      
      It's probably useful to ship these profiles in Debian *somehow* anyway, but with
      the possibility to have AppArmor enabled by default on the horizon, I don't
      think we should encourage average users to install them with such a Suggests.
      5996b480
    • intrigeri's avatar
      Install the "extra" profiles to the default upstream directory (Closes: #832984) · ece72558
      intrigeri authored
      So far we installed these "extra" profiles in
      /usr/share/doc/apparmor-profiles/extras/, while upstream (and OpenSUSE) ship
      them in /usr/share/apparmor/extra-profiles/.
      
      Let's follow upstream defaults for nicer cross-distro user experience. As a nice
      side effect, this makes logprof.conf's inactive_profiledir setting (that point
      to the default upstream location) more useful.
      ece72558
  6. 14 Jan, 2018 10 commits