Ubuntu Install Fest etc.

[Caleb Marcus]

On Mon, 2007-12-10 at 19:45 -0500, Martin Owens wrote:

> >  I just wanted to point out that AppArmor really isn't protecting much of
> > anything yet in Ubuntu... I believe it's only enabled for several packages.
> > It's possible to generate your own AppArmor profiles, but until they start
> > making profiles for all the apps included by default, AppArmor isn't really
> > solving any problems.
> 
> It is enabled and does prevent applications from running, just ask
> people who want to play A tale in the Desert; it's currently just
> preventing execution of archived code, but if the threat appeared it
> would be quickly put into service fully.
> 
> Best Regards, Martin Owens

So, if a threat were to arise, they'd release some sort of update that
would put new policy in place? The problem is that it seems that
apparmor-profiles is in universe and isn't installed by default... it
seems that they sorta limited their ability to stop attacks through
apparmor updates because the profiles package through which they would
probably release the updates is installed manually.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.ubuntu.com/archives/ubuntu-us-ma/attachments/20071210/45bf3d7b/attachment-0001.htm 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : https://lists.ubuntu.com/archives/ubuntu-us-ma/attachments/20071210/45bf3d7b/attachment-0001.pgp