[apparmor] [Merge] lp:~elmo/apparmor-profiles/worldofgoo into lp:apparmor-profiles

James Troup james.troup at canonical.com
Tue Dec 20 01:28:49 UTC 2011


Kees Cook <kees at ubuntu.com> writes:

>> +  @{HOME}/.WorldOfGoo/** rw,
>
> is @{HOME}/.WorldOfGoo/ rw, also needed to initially create the
> directory on first-run?

Good point, fixed in r83.  I've also now tested it with a fresh user to
make sure I didn't missing else.

> Hrm. I thought "m" should only be for _executable_ mmaps, which would
> imply that the READ_IMPLIES_EXEC personality bit was set, implying the
> binaries have executable stacks. But now I can't reproduce this
> behavior. Can you run "execstack -q" on the ELFs?

| james at ornery:~$ execstack -q /opt/WorldOfGoo/WorldOfGoo.bin64 
| X /opt/WorldOfGoo/WorldOfGoo.bin64

-- 
James



More information about the AppArmor mailing list