[pkg-apparmor] Bug#924450: Bug#924450: Bug#924450: apparmor: Write Buster release notes snippet about AppArmor

Christian Boltz debian-bugs at cboltz.de
Wed Mar 13 15:34:12 GMT 2019


Hello,

Am Mittwoch, 13. März 2019, 07:51:23 CET schrieb intrigeri:
> Actually Jonas (Cc'ed) already submitted something:
> https://salsa.debian.org/ddp-team/release-notes/merge_requests/6

Looks mostly good to me, with one exception:

    ... like network access, ...

AFAIK [1] support for enforcing network rules is not available in Debian 
yet, therefore it's probably a good idea to remove the "network" part 
from the text.

If you want to have some items for your list, you can add
- capability
- rlimit (aka ulimit)
- ptrace (since kernel 4.13)
- mount (since kernel 4.14)
- signal (also since kernel 4.14)


Regards,

Christian Boltz

[1] I'm not a Debian expert, and enjoy having the kernel patch to 
    enforce network rules in the openSUSE kernel since years ;-)
-- 
As you may guess from my comments I do not prefer to ask user to
something unless it is really critical like that computer will explode
or if beer getting warm. [Josef Reidinger in yast-devel]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL: <http://alioth-lists.debian.net/pipermail/pkg-apparmor-team/attachments/20190313/262ba117/attachment-0001.sig>


More information about the pkg-apparmor-team mailing list