Mailinglist Archive: opensuse-factory (956 mails)

[Wolfgang Rosenauer <wolfgang@xxxxxxxxxxxxx>]

Hi,

Am 07.10.2011 13:28, schrieb Christian Boltz:
> > Putting half-working profiles in Apparmor is not the way to go, 
> > otherwise soon 'Disable Apparmor' will become part of the standard 
> > troubleshooting advice on the Opensuse forum.
>
> It isn't yet? That's good news and shows that the default profiles use 
> sane rules ;-)

I only used apparmor explicitely once in the past (on the desktop!) to
confine skype but I never disabled it and it never got into my way up to
now.
So if it's maintained (which is) and gives some extra protection with
the default rules (hope so but I haven't checked the profiles for a
while) I'd vote for having it by default. A bonus would be if there is
or will be a good way to find out when apparmor blocks something
(aa-notify is apparently not very mature yet?).


Wolfgang
-- 
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx