Feature #9764

Enforce some more AppArmor profiles

Added by intrigeri about 10 years ago. Updated about 7 years ago.

Status:
Rejected
Priority:
Low
Assignee:
Category:
Target version:
Start date:
2015-07-19
Due date:
% Done:

0%

Feature Branch:
feature/9764-enforce-more-apparmor-profiles
Type of work:
Code
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

With Feature #9539 we install the apparmor-profiles package, but these profiles are installed in complain mode by default. We should set to enforce mode the ones we really want to ship: bin.ping, usr.sbin.avahi-daemon, and usr.sbin.traceroute.


Subtasks


History

#1 Updated by intrigeri about 10 years ago

  • Parent task set to Bug #9534
  • Feature Branch set to feature/9764-enforce-more-apparmor-profiles

#2 Updated by eteupo about 10 years ago

Why not enforce all the profiles? Especially pidgin / torbrowser ones?

#3 Updated by intrigeri about 10 years ago

> Why not enforce all the profiles? Especially pidgin / torbrowser ones?

They are already. See our design doc for details.

#4 Updated by intrigeri about 10 years ago

  • Priority changed from Normal to Low
  • Target version deleted (Tails_1.7)
  • Parent task deleted (Bug #9534)

These profiles are not very important.

#5 Updated by intrigeri about 7 years ago

  • Status changed from Confirmed to Rejected
  • Assignee deleted (intrigeri)

Probably not worth it. Feel free to take it if you feel differently.