Bug#661151: [apparmor] Bug#661151: linux-2.6: lacks AppArmor kernel/userspace interface

[intrigeri <intrigeri@boum.org>]

Hi,

Ben Hutchings wrote (31 May 2012 03:24:09 GMT) :
>> > What about this one:
>> > 
>> > commit 1023c7c2f9d9c5707147479104312c4c3d1a2c2b
>> > Author: John Johansen <john.johansen@canonical.com>
>> > Date:   Wed Aug 10 22:02:39 2011 -0700
>> > 
>> >     AppArmor: compatibility patch for v5 network controll
>> >     
>> >     Add compatibility for v5 network rules.
>> > 
>> 
>> That will provide support for the network rules and if you are
>> willing to carry it that would be greate but is not strictly
>> necessary. Policy can still be loaded and introspected. If that
>> patch is missing and if profile contains network rules the parser
>> will complain about them not being enforced, but it will still load
>> and enforce the rest of the policy

> Looking back over the bug log, I see that wasn't requested, so I'm
> only applying 'AppArmor: compatibility patch for v5 interface' now.

Thanks a lot for applying this patch! This will make our work on
AppArmor in Wheezy much easier, and user experience much better.

However, yes, perhaps it was unclear, but my initial bug report
(shyly) talked of the compatibility patch to solve both "network
mediation does not work at all" issue and the introspection ones,
so it would be absolutely wonderful if you could apply the part of the
compatibility patch that deals with network too (FTR, this would bring
Wheezy on par with what Ubuntu shipped before Precise).

Cheers,
--
  intrigeri
  | GnuPG key @ https://gaffer.ptitcanardnoir.org/intrigeri/intrigeri.asc
  | OTR fingerprint @ https://gaffer.ptitcanardnoir.org/intrigeri/otr.asc