[apparmor] [PATCH] python abstraction updates

Tyler Hicks tyhicks at canonical.com
Mon Nov 4 23:23:07 UTC 2013


On 2013-11-04 17:01:30, Jamie Strandboge wrote:
> On 11/04/2013 04:51 PM, Tyler Hicks wrote:
> > On 2013-11-04 16:42:14, Jamie Strandboge wrote:
> >>
> >> Hi,
> >>
> >> The current development version of Ubuntu needs the following updates to the
> >> python abstraction. I kept the current convention of using a versioned python
> >> like we do with python2, but did not use an AARE because currently only one
> >> python version is affected (python3.3).
> >>
> >> Thanks!
> >>
> >> -- 
> >> Jamie Strandboge                 http://www.ubuntu.com/
> > 
> >> Author: Jamie Strandboge <jamie at canonical.com>
> >> Description: python abstraction updates for Ubuntu 14.04
> >>
> >> --- profiles.orig/apparmor.d/abstractions/python	2012-01-06 10:37:57.000000000 -0600
> >> +++ profiles/apparmor.d/abstractions/python	2013-11-04 09:44:27.376962291 -0600
> >> @@ -13,10 +13,12 @@
> >>    /usr/lib{,32,64}/python2.[4567]/**.{pyc,so}           mr,
> >>    /usr/lib{,32,64}/python2.[4567]/**.{egg,py,pth}       r,
> >>    /usr/lib{,32,64}/python2.[4567]/{site,dist}-packages/ r,
> >> +  /usr/lib{,32,64}/python3.3/lib-dynload/*.so           mr,
> >>  
> >>    /usr/local/lib{,32,64}/python2.[4567]/**.{pyc,so}           mr,
> >>    /usr/local/lib{,32,64}/python2.[4567]/**.{egg,py,pth}       r,
> >>    /usr/local/lib{,32,64}/python2.[4567]/{site,dist}-packages/ r,
> >> +  /usr/local/lib{,32,64}/python3.3/lib-dynload/*.so           mr,
> >>  
> >>    # Site-wide configuration
> >>    /etc/python2.[4567]/** r,
> >> @@ -26,6 +28,7 @@
> >>    /{var,usr}/lib/{pyshared,pycentral,python-support}/**  r,
> >>    /usr/lib/{pyshared,pycentral,python-support}/**.so     mr,
> >>    /var/lib/{pyshared,pycentral,python-support}/**.pyc    mr,
> >> +  /usr/lib/python3/dist-packages/**.so                   mr,
> > 
> > Does this rule need to include site-packages like a couple of the rules
> > above do with '{site,dist}-packages'?
> > 
> 
> I checked when I added the rule and /usr/lib/python3/site-packages/ doesn't
> exist, so no, at least not at this time.

Sounds good.

Acked-by: Tyler Hicks <tyhicks at canonical.com>

Thanks!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20131104/e7dcc97f/attachment.pgp>


More information about the AppArmor mailing list