Hi, Am 07.10.2011 13:28, schrieb Christian Boltz:
Putting half-working profiles in Apparmor is not the way to go, otherwise soon 'Disable Apparmor' will become part of the standard troubleshooting advice on the Opensuse forum.
It isn't yet? That's good news and shows that the default profiles use sane rules ;-)
I only used apparmor explicitely once in the past (on the desktop!) to confine skype but I never disabled it and it never got into my way up to now. So if it's maintained (which is) and gives some extra protection with the default rules (hope so but I haven't checked the profiles for a while) I'd vote for having it by default. A bonus would be if there is or will be a good way to find out when apparmor blocks something (aa-notify is apparently not very mature yet?). Wolfgang -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org