[apparmor] AppArmor 2.10 branch created
Christian Boltz
apparmor at cboltz.de
Tue Dec 8 20:05:53 UTC 2015
Hello,
Am Mittwoch, 18. November 2015 schrieb John Johansen:
> On 11/18/2015 04:51 AM, Christian Boltz wrote:
> > I hereby nominate all my pending patches for 2.10 ;-)
> > (Yes, that includes the signal rule handling, even if that is a new
> > feature ;-)
> Christian,
>
> generally we try to avoid putting new features into the previous
> release. With that said, there are all kinds of exceptions to that,
> and many things that are "new" features, could also be called bugs
> because the feature has already been partially rolled out.
Too bad nobody filed a bug saying "aa-logprof doesn't support signal log
events" ;-)
> Since you are doing most of the work on maintaining logprof/genprof
> I'll deferred to your judgement on how likely these would be to
> introduce a regression. So with the promise that you will work to fix
> any regression they introduce, if you want to put them in 2.10 you
> have my
>
> Acked-by: John Johansen <john.johansen at canonical.com>
I'm quite sure SignalRule doesn't introduce regressions, so there is no
need to fix any regressions *eg*
That said - I just sent the next patch series for ptrace rule support,
which would be the next thing to backport - or not ;-)
AFAIK Ubuntu is the only distribution with a kernel that supports signal
and ptrace rules, and the chances Ubuntu will provide an update to
2.10.1 for Ubuntu <= 15.x seem to be quite low [1]. This means there's
no real-world benefit by adding SignalRule or PtraceRule to 2.10.x.
Therefore I'll keep SignalRule and PtraceRule in trunk only.
(We can always backport the patches to 2.10.x if there is a real need.)
Regards,
Christian Boltz
[1] before doing that, updating the releases that come with 2.9.x to the
to-be-released 2.9.3 would be the more important thing to do ;-)
--
> Hat PackageKit eigentlich mal funktioniert?
Das ist doch das Teil, das Ärger machen soll? Hat immer hervorragend
funktioniert ;)
[> David Haller und Florian Groß auf opensuse-de]
More information about the AppArmor
mailing list