Claudio Freire wrote:
On Mon, Dec 9, 2013 at 5:29 AM, Sascha Peilicke <speilicke@suse.com> wrote:
Running "aa-logprof" is no big deal for an experienced admin, but having ready-to-go apparmor profiles would make life easier for the newbie.
Haha, good one. I have seen several profiles created by "experienced admins" and its really hard to not open up more than you have too. Do you know why we switched it off by default in the first place?
False sense of security due to bad profiles?
I would like, however, that packagers were encouraged (while not forced) to provide profiles.
That's what I had in mind - just a warning somewhere appropriate when no profile is included (or not marked as "not needed"). -- Per Jessen, Zürich (-1.2°C) http://www.hostsuisse.com/ - dedicated server rental in Switzerland. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org