[apparmor] [patch 2/9] profiles - separate out logprof checks from parser checks
John Johansen
john.johansen at canonical.com
Tue Dec 18 22:34:09 UTC 2012
On 12/18/2012 06:17 AM, Steve Beattie wrote:
> his patch separates out make check in the profiles/ directory into
> two sub targets, for checking profiles against the built parser
> and aa-logprof respectively. The logprof check currently makes some
> assumptions about the environment that make it difficult to run in
> a minimal chroot environment.
>
err, While I like the idea I have problems with turning on check-logprof
by default. logprof is out of date and needs updating there are several
profile elements it just does not handle at the moment.
So unless we put the effort into fixing logprof I don't think that check
should be on by default
More information about the AppArmor
mailing list