Bug#909849: evince: apparmor profile hardening

Jamie Strandboge jamie at canonical.com
Tue Oct 2 17:18:56 BST 2018


On Tue, 02 Oct 2018, Jeremy Bicha wrote:

> Control: user -1 pkg-apparmor-team at lists.alioth.debian.org
> Control: usertags -1 + modify-profile
> 
> On Sat, Sep 29, 2018 at 10:15 AM Jamie Strandboge <jamie at ubuntu.com> wrote:
> > In Ubuntu, the attached patch was applied to achieve the following:
> >
> >   * debian/apparmor-profile.abstraction, apparmor-profile: harden the profile
> >     - add preamble for expectations of the profile
> 
> There is more discussion of this issue in
> https://launchpad.net/bugs/1788929 where it's being treated as a
> security bug.
> 
> I don't have any experience with AppArmor rules so I'm considering
> just merging this unless anyone else wants to weigh in.

To be clear, in Ubuntu it is tagged as 'Security' but we are just adding
hardening, no USN.

-- 
Jamie Strandboge             | http://www.canonical.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnome-maintainers/attachments/20181002/0e69d74d/attachment.sig>


More information about the pkg-gnome-maintainers mailing list