Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Load all the profile if not loaded for Ubuntu #12482

Merged
merged 11 commits into from
Nov 11, 2024

Commits on Nov 8, 2024

  1. Configuration menu
    Copy the full SHA
    b04e254 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    597611d View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    7eb5d46 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    7c9a113 View commit details
    Browse the repository at this point in the history
  5. Configuration menu
    Copy the full SHA
    b7dee27 View commit details
    Browse the repository at this point in the history
  6. Configuration menu
    Copy the full SHA
    1d46527 View commit details
    Browse the repository at this point in the history
  7. Remove sle too

    alanmcanonical committed Nov 8, 2024
    Configuration menu
    Copy the full SHA
    6a17a1f View commit details
    Browse the repository at this point in the history
  8. Fix apparmor_complain rule to not load disabled profiles

    This is to avoid enforcing the rsyslogd profile which
    is disabled by default on Jammy.
    
    Issue introduced with the recent change of the default value
    var_apparmor_mode from complain to enforce.
    mpurg authored and alanmcanonical committed Nov 8, 2024
    Configuration menu
    Copy the full SHA
    34c3ecb View commit details
    Browse the repository at this point in the history
  9. Fix apparmor tests

    Tests for ensure_apparmor_enforce were failing because
    aa-complain and aa-enforce enabled the rsyslogd profile,
    which is disabled by default, thus marking it as an "unconfined
    process with a defined profile" and failing the SCE.
    
    Solution is to restart the service when loading the profiles.
    
    Tests for ensure_apparmor_enforce_or_complain were adapted
    to not load disabled profiles.
    mpurg authored and alanmcanonical committed Nov 8, 2024
    Configuration menu
    Copy the full SHA
    7f33cf6 View commit details
    Browse the repository at this point in the history
  10. Configuration menu
    Copy the full SHA
    fb6ac37 View commit details
    Browse the repository at this point in the history

Commits on Nov 11, 2024

  1. Configuration menu
    Copy the full SHA
    d7b3438 View commit details
    Browse the repository at this point in the history