-
-
Notifications
You must be signed in to change notification settings - Fork 41
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
openSUSE profile additions #208
Comments
Thanks. They should be integrated now. |
I was wondering, my experience with rpm package is very limited, do you know if there is a way to build your package from local source instead of using a git talbar . This is the default for debian and very easy to do for arch, but I don't find a clean way for opensuse. Edit: found the solution. |
A month later, I have some more profile additions: aa-2023-10-09.txt |
Oh, and the git profile doesn't cover the binary path used on Tumbleweed: You'll also need to update the profiles that allow to exec git - a quick grep lists etckeeper, hugo, onefetch, pass, repo and youtube-dl. |
Thanks, there are less logs that may be a good sign ;) |
Indeed :-) I see you edited away your question about git, but I'll answer it anyway ;-)
|
The rule should be integrated now. Do we agree that:
|
I'm afraid I can't really agree ;-)
Also, the git profile still doesn't match the path on Tumbleweed ( For some more boring denials, see the attached apparmor-2023-10-12.txt |
Good point. I am wondering if in this case,
My bad, I forgot to commit my changes... This is pushed now. |
Extending In the meantime, I can offer some new denials, mostly for update-ca-certificates (probably triggered while restarting unbound, I started to create a profile for it): apparmor-2023-10-20.txt |
Some more additions: apparmor-2023-10-22.txt |
I have some more profile additions on openSUSE: apparmor-2023-09-05.txt
The text was updated successfully, but these errors were encountered: