From bugzilla_noreply@novell.com Tue Nov 12 13:25:41 2013 From: bugzilla_noreply@novell.com To: bugs@lists.opensuse.org Subject: [Bug 850058] New: AppArmor Date: Tue, 12 Nov 2013 13:25:31 +0000 Message-ID: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1577694809036303545==" --===============1577694809036303545== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugzilla.novell.com/show_bug.cgi?id=850058 https://bugzilla.novell.com/show_bug.cgi?id=850058#c0 Summary: AppArmor Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Release Notes AssignedTo: ke(a)suse.com ReportedBy: aplanas(a)suse.com QAContact: coolo(a)suse.com Found By: --- Blocker: --- This text is a proposal for inclusion in the release note AppArmor -------- AppArmor is enabled by default which means more security, but can cause you some troubles when running service in less expected ways. If you run into strange permission problems, try disabling it and but report bugs even if it helps, as we want to fix AppArmor profiles to include even corner cases. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug. --===============1577694809036303545==-- From bugzilla_noreply@novell.com Tue Nov 12 16:02:52 2013 From: bugzilla_noreply@novell.com To: bugs@lists.opensuse.org Subject: [Bug 850058] AppArmor Date: Tue, 12 Nov 2013 16:01:49 +0000 Message-ID: <20131112160149.47B56245514@molor.provo.novell.com> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============7704522830553706748==" --===============7704522830553706748== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugzilla.novell.com/show_bug.cgi?id=3D850058 https://bugzilla.novell.com/show_bug.cgi?id=3D850058#c1 Karl Eichwalder changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium Status|NEW |ASSIGNED --- Comment #1 from Karl Eichwalder 2013-11-12 17:01:47 CET -= -- My proposal: AppArmor and Permission Settings AppArmor is enabled by default. This means more security, but prevent services from working, if you run them in less expected ways. If you encounter strange permission problems, try to disable AppArmor for the affected service. Even if it helps report it as a bug, because we want to fix AppArmor profiles to cover also corner cases. --=20 Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=3Demail ------- You are receiving this mail because: ------- You are on the CC list for the bug. --===============7704522830553706748==-- From bugzilla_noreply@novell.com Tue Nov 12 16:07:23 2013 From: bugzilla_noreply@novell.com To: bugs@lists.opensuse.org Subject: [Bug 850058] AppArmor Date: Tue, 12 Nov 2013 16:07:06 +0000 Message-ID: <20131112160706.9DAD6245511@molor.provo.novell.com> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3811161138582179368==" --===============3811161138582179368== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugzilla.novell.com/show_bug.cgi?id=3D850058 https://bugzilla.novell.com/show_bug.cgi?id=3D850058#c2 --- Comment #2 from Alberto Planas Dominguez 2013-11-12 = 16:07:06 UTC --- This is more clear now. Thanks. --=20 Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=3Demail ------- You are receiving this mail because: ------- You are on the CC list for the bug. --===============3811161138582179368==-- From bugzilla_noreply@novell.com Wed Nov 13 14:20:17 2013 From: bugzilla_noreply@novell.com To: bugs@lists.opensuse.org Subject: [Bug 850058] AppArmor Date: Wed, 13 Nov 2013 14:20:12 +0000 Message-ID: <20131113142012.4788D245511@molor.provo.novell.com> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============4783782396783209143==" --===============4783782396783209143== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugzilla.novell.com/show_bug.cgi?id=3D850058 https://bugzilla.novell.com/show_bug.cgi?id=3D850058#c3 Karl Eichwalder changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Blocks| |850258 Resolution| |FIXED --- Comment #3 from Karl Eichwalder 2013-11-13 15:20:11 CET -= -- done. --=20 Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=3Demail ------- You are receiving this mail because: ------- You are on the CC list for the bug. --===============4783782396783209143==-- From bugzilla_noreply@novell.com Tue Nov 19 15:06:50 2013 From: bugzilla_noreply@novell.com To: bugs@lists.opensuse.org Subject: [Bug 850058] AppArmor Date: Tue, 19 Nov 2013 15:06:24 +0000 Message-ID: <20131119150625.422CE245511@molor.provo.novell.com> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============4635604308658085599==" --===============4635604308658085599== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugzilla.novell.com/show_bug.cgi?id=3D850058 https://bugzilla.novell.com/show_bug.cgi?id=3D850058#c4 --- Comment #4 from Swamp Workflow Management 2013-11-19 15= :06:24 UTC --- openSUSE-RU-2013:1731-1: An update that has 9 recommended fixes can now be installed. Category: recommended (low) Bug References: 847801,849112,850052,850053,850054,850056,850057,850058,850258 CVE References:=20 Sources used: openSUSE 13.1 (src): release-notes-openSUSE-13.1.7-10.1 --=20 Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=3Demail ------- You are receiving this mail because: ------- You are on the CC list for the bug. --===============4635604308658085599==-- From bugzilla_noreply@novell.com Sat Nov 23 21:45:13 2013 From: bugzilla_noreply@novell.com To: bugs@lists.opensuse.org Subject: [Bug 850058] AppArmor Date: Sat, 23 Nov 2013 21:44:41 +0000 Message-ID: <20131123214442.40B07245511@molor.provo.novell.com> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1948508713583305946==" --===============1948508713583305946== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugzilla.novell.com/show_bug.cgi?id=3D850058 https://bugzilla.novell.com/show_bug.cgi?id=3D850058#c5 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED CC| |suse-beta(a)cboltz.de Resolution|FIXED | --- Comment #5 from Christian Boltz 2013-11-23 22:44:= 40 CET --- It's nice to find out someone adds a release notes entry without asking the affected packager ;-) In general I agree with the text, but I'd like to add some details to make it more helpful. (In reply to comment #1) > AppArmor and Permission Settings > > AppArmor is enabled by default. This means more security, but > prevent services from working, if you run them in less expected _might_ prevent services ... > ways. If you encounter strange permission problems, try to disable > AppArmor for the affected service. =20 ... try to switch the AppArmor profile for the affected service to complain mode with "aa-complain /usr/bin/$your_service". Complain mode means: allow everything, and log things that the profile would not allow. > Even if it helps report it as a > bug, because we want to fix AppArmor profiles to cover also corner > cases. I fully agree with this sentence ;-) --=20 Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=3Demail ------- You are receiving this mail because: ------- You are on the CC list for the bug. --===============1948508713583305946==-- From bugzilla_noreply@novell.com Mon Nov 25 16:10:47 2013 From: bugzilla_noreply@novell.com To: bugs@lists.opensuse.org Subject: [Bug 850058] AppArmor Date: Mon, 25 Nov 2013 16:09:28 +0000 Message-ID: <20131125160928.1925CCC6A5@soval.provo.novell.com> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============5416847389607758460==" --===============5416847389607758460== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugzilla.novell.com/show_bug.cgi?id=850058 https://bugzilla.novell.com/show_bug.cgi?id=850058#c Karl Eichwalder changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |ASSIGNED -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug. --===============5416847389607758460==-- From bugzilla_noreply@novell.com Mon Nov 25 16:11:04 2013 From: bugzilla_noreply@novell.com To: bugs@lists.opensuse.org Subject: [Bug 850058] AppArmor Date: Mon, 25 Nov 2013 16:08:22 +0000 Message-ID: <20131125160822.2323FCC6A5@soval.provo.novell.com> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3320566136454862143==" --===============3320566136454862143== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit https://bugzilla.novell.com/show_bug.cgi?id=850058 https://bugzilla.novell.com/show_bug.cgi?id=850058#c Karl Eichwalder changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |852179 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug. --===============3320566136454862143==-- From bugzilla_noreply@novell.com Tue Dec 3 16:33:19 2013 From: bugzilla_noreply@novell.com To: bugs@lists.opensuse.org Subject: [Bug 850058] AppArmor Date: Tue, 03 Dec 2013 16:33:11 +0000 Message-ID: <20131203163311.49B87245511@molor.provo.novell.com> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============8288659180381396348==" --===============8288659180381396348== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugzilla.novell.com/show_bug.cgi?id=3D850058 https://bugzilla.novell.com/show_bug.cgi?id=3D850058#c6 --- Comment #6 from Karl Eichwalder 2013-12-03 17:33:10 CET -= -- (In reply to comment #5) > It's nice to find out someone adds a release notes entry without asking the > affected packager ;-) We did not want to bother you with this documentation writing stuff. But thanks for your feedback! I now propose this version based on your improvements: AppArmor and Permission Settings AppArmor is enabled by default. This means more security, but might prevent services from working, if you run them in unexpected ways. If you encounter strange permission problems, try to switch the AppArmor profile for the affected service to complain mode with: aa-complain /usr/bin/$your_service Complain mode means: allow everything, and log things that the profile would not allow. Even if it helps report it as a bug! We want to fix AppArmor profiles to cover also corner cases. --=20 Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=3Demail ------- You are receiving this mail because: ------- You are on the CC list for the bug. --===============8288659180381396348==-- From bugzilla_noreply@novell.com Tue Dec 3 18:02:26 2013 From: bugzilla_noreply@novell.com To: bugs@lists.opensuse.org Subject: [Bug 850058] AppArmor Date: Tue, 03 Dec 2013 18:02:14 +0000 Message-ID: <20131203180214.2D24DCC69A@soval.provo.novell.com> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============1099337572326421603==" --===============1099337572326421603== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugzilla.novell.com/show_bug.cgi?id=3D850058 https://bugzilla.novell.com/show_bug.cgi?id=3D850058#c7 --- Comment #7 from Christian Boltz 2013-12-03 19:02:= 13 CET --- (In reply to comment #6) > We did not want to bother you with this documentation writing stuff. =20 You had one chance to bother me with something, while I'm constantly bothering you with bug reports against the release notes. In your place, I'd have taken this chance (even if it was only for "Rache ist s=C3=BC=C3=9F"[1] ;-) - you n= ever know when you'll get another chance ;-) That said - the improved text looks good :-) [1] Lars is quite good at that - often it's like "thanks for your bugreport, and BTW, the samba profile needs to allow access to..." ;-) --=20 Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=3Demail ------- You are receiving this mail because: ------- You are on the CC list for the bug. --===============1099337572326421603==-- From bugzilla_noreply@novell.com Wed Dec 4 13:44:51 2013 From: bugzilla_noreply@novell.com To: bugs@lists.opensuse.org Subject: [Bug 850058] AppArmor Date: Wed, 04 Dec 2013 13:44:20 +0000 Message-ID: <20131204134420.BFB3E245511@molor.provo.novell.com> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============6463156833790600684==" --===============6463156833790600684== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugzilla.novell.com/show_bug.cgi?id=3D850058 https://bugzilla.novell.com/show_bug.cgi?id=3D850058#c8 Karl Eichwalder changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #8 from Karl Eichwalder 2013-12-04 14:44:20 CET -= -- ok :) Fixed in SVN. To be release next week, together with the translations. --=20 Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=3Demail ------- You are receiving this mail because: ------- You are on the CC list for the bug. --===============6463156833790600684==-- From bugzilla_noreply@novell.com Mon Dec 16 14:08:09 2013 From: bugzilla_noreply@novell.com To: bugs@lists.opensuse.org Subject: [Bug 850058] AppArmor Date: Mon, 16 Dec 2013 14:07:36 +0000 Message-ID: <20131216140736.BD124CC7C3@soval.provo.novell.com> In-Reply-To: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============4491023175465232020==" --===============4491023175465232020== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable https://bugzilla.novell.com/show_bug.cgi?id=3D850058 https://bugzilla.novell.com/show_bug.cgi?id=3D850058#c9 --- Comment #9 from Swamp Workflow Management 2013-12-16 14= :07:35 UTC --- openSUSE-RU-2013:1887-1: An update that has four recommended fixes can now be installed. Category: recommended (low) Bug References: 849449,850058,851083,851588 CVE References:=20 Sources used: openSUSE 13.1 (src): release-notes-openSUSE-13.1.9-29.1 --=20 Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=3Demail ------- You are receiving this mail because: ------- You are on the CC list for the bug. --===============4491023175465232020==--