[apparmor] [patch 2/9] profiles - separate out logprof checks from parser checks

John Johansen john.johansen at canonical.com
Tue Dec 18 22:34:09 UTC 2012


On 12/18/2012 06:17 AM, Steve Beattie wrote:
> his patch separates out make check in the profiles/ directory into
> two sub targets, for checking profiles against the built parser
> and aa-logprof respectively. The logprof check currently makes some
> assumptions about the environment that make it difficult to run in
> a minimal chroot environment.
> 

err, While I like the idea I have problems with turning on check-logprof
by default. logprof is out of date and needs updating there are several
profile elements it just does not handle at the moment.

So unless we put the effort into fixing logprof I don't think that check
should be on by default




More information about the AppArmor mailing list