[pkg-apparmor] Bug#712451: Bug#712451: Please support AppArmor network rules

Heenec heenec at firemail.cc
Wed Apr 8 22:02:02 BST 2020


intrigeri:
> FWIW, this is now mentioned in the manpage that documents the policy
> language: apparmor.d(5)

Maybe I have not read the manual thoroughly enough, but I have not found
mentions of features that does not work in Debian yet. Maybe such notice
should be placed in "Network Rules" section of the manual? Or in
"KNOWN BUGS"? So that newcomers will not be misguided (like me).

Okay, it's my bad that I have not checked explicitly if it works. But
IMO there is an issue with documentation if you can't understand from it
what is supposed to be working and what is not.

By the way, ping under apparmor fails with "ping: socket: Operation not
permitted", while wget or curl works pretty well under the same profile.
Don't know if it is supposed to be like it.

Heenec
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0x4B12C0FAA12F367B.asc
Type: application/pgp-keys
Size: 2448 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-apparmor-team/attachments/20200409/30eeeec4/attachment.key>


More information about the pkg-apparmor-team mailing list