Hello, Am Samstag, 16. August 2014 schrieb pinguin74:
do you know a good source for working, proper AppArmor profiles?
I am especially looking for a good Firefox and Thunderbird profile.
I guess you already found the apparmor-profiles package ;-) and probably noticed that it also contains some additional (rarely tested) profiles in /etc/apparmor/profiles/extras/ [1] (including a profile for firefox, but I'm afraid it's terribly outdated). aa-genprof will also offer the profiles from the extras directory as base. Besides that, you might want to have a look at the profiles Ubuntu ships. You can find them at http://bazaar.launchpad.net/~apparmor-dev/apparmor-profiles/master/files/hea... but some of the profiles are "hidden" inside the packages, so you'll have to extract them from the *.deb or the package sources on launchpad [2]. Note: I never tested the Ubuntu profiles on openSUSE - they are probably a good start, but you'll need to make some adjustments. Regards, Christian Boltz [1] starting with AppArmor 2.9, the extra profiles will be in /usr/share/apparmor/extra-profiles/ [2] I know this is far from ideal, and discussed this with some Ubuntu people (who are also working on upstream AppArmor) more than once. Unfortunately we don't have a good solution yet :-( PS: random sig ;-) -- <cboltz> jjohansen: we can just label it "the can't be more broken than 2.8.3 release" ;-) <jjohansen> cboltz: no, with a name like that murphy is bound to strike [from #apparmor] -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-security+owner@opensuse.org