[Bug 1150338] Drop Ghostscript apparmor profile as it is useless
![](https://seccdn.libravatar.org/avatar/3035b38ff33cf86f480bb169b8500b80.jpg?s=120&d=mm&r=g)
http://bugzilla.opensuse.org/show_bug.cgi?id=1150338 http://bugzilla.opensuse.org/show_bug.cgi?id=1150338#c11 --- Comment #11 from Dr. Werner Fink <werner@suse.com> --- (In reply to Christian Boltz from comment #10)
(In reply to Martin Wilck from comment #8)
Anyway, as I've been asked to review https://build.opensuse.org/request/show/730528 - is there consensus about the AA profile?
I strongly recommend to keep the profile (and to extend it to also attach to gs.bin, not only gs)
If AA profile then yes for gs.bin as this is the main binary now ... and no for the shell scripts using gs(.bin) as this does not increase security at all but cause more complicated rules not to break scripts. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com