[apparmor] [patch] Change aa.py ask_the_questions() to use the aa-mergeprof code for capabilities
Seth Arnold
seth.arnold at canonical.com
Wed Jun 3 00:31:54 UTC 2015
On Tue, Jun 02, 2015 at 04:42:40PM -0700, Steve Beattie wrote:
> > BTW: I'm not sure if filtering and having different default buttons
> > based on the profile mode makes sense, except for "historical reasons".
> > Opinions?
>
> Yeah, I don't recall or understand why things were done that way
> either.
I think the theory was that in complain mode you were going to be
allowing nearly everything, since your tests were going to be filled
with primarily positive inputs but in enforce mode you were going to
be looking at exceptional events, possibly even attacks, and thus most
things were going to be denied.
It makes sense to me but if it leads to excessively ugly code I wouldn't
mind ditching that.
Thanks
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20150602/4db090bd/attachment.pgp>
More information about the AppArmor
mailing list