[apparmor] [Merge] lp:~elmo/apparmor-profiles/worldofgoo into lp:apparmor-profiles

[Kees Cook]

On Sat, Dec 17, 2011 at 12:10:30AM -0000, James Troup wrote:
> James Troup has proposed merging lp:~elmo/apparmor-profiles/worldofgoo into lp:apparmor-profiles.

Yay! World of Goo!

> +  @{HOME}/.WorldOfGoo/** rw,

is @{HOME}/.WorldOfGoo/ rw, also needed to initially create the directory
on first-run?

> +  # World of Goo seems to like to mmap files more than some of the
> +  # abstractions allow for...
> +  /run/shm/pulse-shm-* mr,
> +  /usr/share/locale-langpack/** mr,
> +  /dev/dri/card0 mrw,

Hrm. I thought "m" should only be for _executable_ mmaps, which would imply
that the READ_IMPLIES_EXEC personality bit was set, implying the binaries
have executable stacks. But now I can't reproduce this behavior. Can you
run "execstack -q" on the ELFs?

Thanks!

-Kees

-- 
Kees Cook