Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clean up and merge sbin.dhclient profile #4

Open
2 tasks
mckinney-subgraph opened this issue Sep 21, 2017 · 0 comments
Open
2 tasks

Clean up and merge sbin.dhclient profile #4

mckinney-subgraph opened this issue Sep 21, 2017 · 0 comments
Labels

Comments

@mckinney-subgraph
Copy link
Contributor

  • Merge our profile with the upstream Debian sbin.dhclient profile
    (Attached an example diff, needs a person to look at it more carefully instead of just applying it directly)
    apparmor_sbin-dhclient-debianvssgos.txt

  • Clean up the "unconfined exec qualifier (ux)" warnings in our profile, first reported here
    Example:

Jul 17 22:08:56 subgraph apparmor[15635]: Starting AppArmor profiles:Warning from /etc/apparmor.d/sbin.dhclient (/etc/apparmor.d/sbin.dhclient line 45): Unconfined exec qualifier (ux) allows some dangerous environment variables to be passed to the unconfined process; 'man 5 apparmor.d' for details.
Jul 17 22:08:56 subgraph apparmor[15635]: Warning from /etc/apparmor.d/sbin.dhclient (/etc/apparmor.d/sbin.dhclient line 57): Unconfined exec qualifier (ux) allows some dangerous environment variables to be passed to the unconfined process; 'man 5 apparmor.d' for details.
...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant