Feature #9764

Enforce some more AppArmor profiles

Added by intrigeri 2015-07-19 06:26:22 . Updated 2018-12-02 22:19:59 .

Status:
Rejected
Priority:
Low
Assignee:
Category:
Target version:
Start date:
2015-07-19
Due date:
% Done:

0%

Feature Branch:
feature/9764-enforce-more-apparmor-profiles
Type of work:
Code
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

With Feature #9539 we install the apparmor-profiles package, but these profiles are installed in complain mode by default. We should set to enforce mode the ones we really want to ship: bin.ping, usr.sbin.avahi-daemon, and usr.sbin.traceroute.

Subtasks

History

#1 Updated by intrigeri 2015-07-19 06:28:30

  • Parent task set to Bug #9534
  • Feature Branch set to feature/9764-enforce-more-apparmor-profiles

#2 Updated by eteupo 2015-07-19 10:26:56

Why not enforce all the profiles? Especially pidgin / torbrowser ones?

#3 Updated by intrigeri 2015-07-19 10:37:38

> Why not enforce all the profiles? Especially pidgin / torbrowser ones?

They are already. See our design doc for details.

#4 Updated by intrigeri 2015-10-05 13:22:30

  • Priority changed from Normal to Low
  • Target version deleted (Tails_1.7)
  • Parent task deleted (Bug #9534)

These profiles are not very important.

#5 Updated by intrigeri 2018-12-02 22:19:59

  • Status changed from Confirmed to Rejected
  • Assignee deleted (intrigeri)

Probably not worth it. Feel free to take it if you feel differently.