https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c1 --- Comment #1 from Scott Couston 2010-12-18 00:20:07 UTC --- Created an attachment (id=405477) --> (http://bugzilla.novell.com/attachment.cgi?id=405477) PROGRESSIVE IMAGES -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c3 --- Comment #3 from Scott Couston 2010-12-18 00:20:54 UTC --- Created an attachment (id=405479) --> (http://bugzilla.novell.com/attachment.cgi?id=405479) PROGRESSIVE IMAGES -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c5 --- Comment #5 from Scott Couston 2010-12-18 00:21:58 UTC --- Created an attachment (id=405481) --> (http://bugzilla.novell.com/attachment.cgi?id=405481) PROGRESSIVE IMAGES -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c7 --- Comment #7 from Scott Couston 2010-12-18 00:23:01 UTC --- Created an attachment (id=405483) --> (http://bugzilla.novell.com/attachment.cgi?id=405483) PROGRESSIVE IMAGES -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c9 --- Comment #9 from Scott Couston 2010-12-18 00:24:00 UTC --- Created an attachment (id=405485) --> (http://bugzilla.novell.com/attachment.cgi?id=405485) PROGRESSIVE IMAGES -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c11 Scott Couston changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |scott@aphofis.com --- Comment #11 from Scott Couston 2010-12-18 00:32:46 UTC --- QA - I think this massive bug should be have its visibility restricted but I cannot find the tick box to do so - I'm probably staring at it, but could you turn this option ON to restrict visability -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c13 --- Comment #13 from Jeff Mahoney 2010-12-20 14:55:58 UTC --- I don't think we want to start getting in the position of judging how bugs reported against openSUSE might affect Novell. Yes, Novell is definitely a major supporter of openSUSE but the project is considered independent even if not yet officially so. That said, I don't think the GUI is actually part of the apparmor project. I think it's part of YaST. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c wei wang changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |wewang@novell.com AssignedTo|bnc-team-screening@forge.pr |kmachalkova@novell.com |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c16 --- Comment #16 from Scott Couston 2010-12-21 21:24:14 UTC --- We have a saying in Australia that goes No (Positive or Negative) Advertising is bad advertising Any advertising is always good no matter the problem being good or bad ..Personally I would be embarrassed to tout Apparmour as it is presented to the user his on a boxed or enterprise box, when its currently this bad...:-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c17 Hubert Mantel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mantel@novell.com AssignedTo|yast2-maintainers@suse.de |kmachalkova@novell.com Severity|Critical |Minor --- Comment #17 from Hubert Mantel 2010-12-22 08:03:14 UTC --- Disliking the UI does not justify a severity of CRITICAL. If I understand correctly, there is no loss or corruption of data. Re-assigning to maintainer. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c20 Scott Couston changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|Minor |Critical --- Comment #20 from Scott Couston 2010-12-22 11:12:21 UTC --- Re-Assigned to Critical! After we create user login credentials by the Update Profile Wizard we define an email address. There are NO emails delivered either by way of the address entered in Apparmour's Control Panel. If login credential and email desposal addresses are yet to be created, the notification address must be one of a local host systems address I cannot determine if any user receives either system email notifications, or notifications to the associated email address what-so-ever and I have had Apparmour to deliver them We have NO evidence to show Apparmour does anything...With the Apparmour 'Update Profile Wizard' We don’t know where we are creating a user login, we don't know what is meant by the UI telling us "a repository has been added" Other usage of the Update Profile Wizard, after login credentials have been created and a repository established; offers to either throw the user out of the UI or present the user with huge options like the below. The help pages are badly written or absent of details ; example, a Severity of Notification of 1 is the highest or the lowest value?????? The depth of very technical options for permissions and that effect files/directory/applications is absent or poorly written. The usage of editing a profile has the help displaying the following but no interpenetration. *Clean Exec The Clean Exec option for the discrete profile and unconstrained execute permissions provide added security by stripping the environment that is inherited by the child program of specific variables. These variables are: GCONV_PATH GETCONF_DIR HOSTALIASES LD_AUDIT LD_DEBUG LD_DEBUG_OUTPUT LD_DYNAMIC_WEAK LD_LIBRARY_PATH LD_ORIGIN_PATH LD_PRELOAD LD_PROFILE LD_SHOW_AUXV LD_USE_LOAD_BIAS LOCALDOMAIN LOCPATH MALLOC_TRACE NLSPATH RESOLV_HOST_CONF RES_OPTION TMPDIR TZDIR any yet offers no explanation The UI 'Add Profile Wizard' has NO accessible help screens and asks the user to browse the directory structure from root to find the application's executable files they seek to protect - All without any Help Screens Apparmour's self learning of an executable Application, to both protect and not change the application from normal use; just doesn't work. - Most of the time you end up with an unusable application that IS protected. Apparmour's Security Event Report also offers a browse for log files from the root directory. It also permits the creation of user specific reports. After a Report has been 'run now' the user is dumped out of the UI. Re-entering the Security Reports and clicking on View Archive, the user has another browse from root. I can't find out how to demand execute a default report and be able to view it or able to view any archive file/Log...... None of us are Hacks and its inference is neither helpful nor constructive Off course such a mess is critical - Either it does not work or be dont have the UI tools to make it work and to get notifications and reports demand or otherwise...Its pretty broken all over eh!!!!! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c22 --- Comment #22 from Scott Couston 2010-12-22 19:26:52 UTC --- AJ - Welcome back - I'm o.k with Major. Agree we don’t know if notification nor indecent logs data is being lost or just not created, but minor this is not. - hence its reassignment back again... Its hot as as hadies down here - Kinda like snow at Christmas but down here, Christmas day it normally the hottest day of the year and should be about 38 - 42...:-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c24 --- Comment #24 from Scott Couston 2011-01-12 06:25:34 UTC --- Time goes fast and I am happy to see this remain as new for a while. We still have no evidence Apparmour does anything! In Yast the full heading of Novell Apparmour contains many UI's each of which has its function. Its current functionality is unknown as in creating a user login to ? to possibly share profiles? See Opening Comments titled 'Steps to Reproduce' We can get rid of all the UIs under the Group Apparmour and start over from scratch that would be great! I dont want this bug to end up being mishandled so poorly and never fixed as in NM/IFUP. Other Suse members tells me the same story and we all foolishly thought we were going to roll back to 11.0 where both NM and IF up work together without issue at all! I am going to watch this bug just in case you can get Apparmour and its new UI's to actually work and sort-out this monster of compounded illogic thought ??? If we can't fix this by 11.4 Release - We should remove Apparmour from the Yast default installation as no one is going to miss an app that either the user cannot understand but moreover it poor control UI's - Every Single UI in Apparmour is and F! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c26 --- Comment #26 from Scott Couston 2011-01-12 23:20:55 UTC --- Under the Yast heading Novell Apparmour and firstly we have a 'Control Panel' that is divided into two sections - The first is Notification - Here the issue is the you can enter any email type address and it is accepted aaa@???.com The other part is to show or turn on/off existing profiles - Thats all you can do in control panel. For any user to get any benefit the Icon the user needs to start with is Update Profile Wizard and create a login to ???. After a user adds a profile it askes you if you want to upload the new profile to the repository. Even if this does work - It should be part of the Control Panel...The other huge messes are above. As this looks very much like Novell's problem, they probably have the money to throw at it. Apparmour is one of Novell's draw cards and I wonder what it looks line in the Enterprise Software as well as a part of Netware. The way this group currently functions?? is more of embarrassment than anything else - I do get a bit tired telling new users that Apparmour does not work and its impossibly difficult to understand the Login that first needs to be completed in Update Profile Wizard. I would throw this back to Novell who has more money than us ...:-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c28 Jeff Mahoney changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-screening@forge.pr |jeffm@novell.com |ovo.novell.com | --- Comment #28 from Jeff Mahoney 2011-01-25 16:15:46 UTC --- The solution for the login mess is going to be to rip out the repository functionality entirely. The server hasn't been maintained for some time and was initially just an experiment. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c30 --- Comment #30 from Scott Couston 2011-01-29 22:32:44 UTC --- My Apologies Jeff - Many of my local expressions do not translate well to other countries or other languages - That's not to say that I can see where your explanation in #29 creates discord. We use the expression "throw money at the problem" very frequently but I see not that it does not convey the same meaning outside of Australia. Jeff - I DO want to know if I inadvertently offend anyone when I use a local expression or when I write text that lacks meaning to the project. - So your #29 is of great value...I suppose that's why the Project brings together so many people all over the planet as many local expectations can be solved and localisation is never left behind. Despite this being a community project I treat it like any other commercial software development project that has a PMS( Problem Management System System) and a Quality Manager etc etc. Again my Apologies, but please dont stop telling me when I use an expression that does not translate well into another country or language -:) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=660373 https://bugzilla.novell.com/show_bug.cgi?id=660373#c32 Jeff Mahoney changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |WONTFIX --- Comment #32 from Jeff Mahoney 2011-08-02 21:34:37 UTC --- I'm not sure how to close this one out. I've changed the AppArmor code to disable the repository garbage by default. The other stuff seems like it's working as expected, just not as the reporter would prefer. As stated, we accept patches. If further movement is expected on this, they'll be required. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.