-
Notifications
You must be signed in to change notification settings - Fork 698
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Load all the profile if not loaded for Ubuntu #12482
Merged
dodys
merged 11 commits into
ComplianceAsCode:master
from
alanmcanonical:apparmor_load_all
Nov 11, 2024
Merged
Load all the profile if not loaded for Ubuntu #12482
dodys
merged 11 commits into
ComplianceAsCode:master
from
alanmcanonical:apparmor_load_all
Nov 11, 2024
Commits on Nov 8, 2024
-
Load all the profile if not loaded for Ubuntu without change the mode…
… of loaded profiles
Configuration menu - View commit details
-
Copy full SHA for b04e254 - Browse repository at this point
Copy the full SHA b04e254View commit details -
Configuration menu - View commit details
-
Copy full SHA for 597611d - Browse repository at this point
Copy the full SHA 597611dView commit details -
Configuration menu - View commit details
-
Copy full SHA for 7eb5d46 - Browse repository at this point
Copy the full SHA 7eb5d46View commit details -
Configuration menu - View commit details
-
Copy full SHA for 7c9a113 - Browse repository at this point
Copy the full SHA 7c9a113View commit details -
Configuration menu - View commit details
-
Copy full SHA for b7dee27 - Browse repository at this point
Copy the full SHA b7dee27View commit details -
Configuration menu - View commit details
-
Copy full SHA for 1d46527 - Browse repository at this point
Copy the full SHA 1d46527View commit details -
Configuration menu - View commit details
-
Copy full SHA for 6a17a1f - Browse repository at this point
Copy the full SHA 6a17a1fView commit details -
Fix apparmor_complain rule to not load disabled profiles
This is to avoid enforcing the rsyslogd profile which is disabled by default on Jammy. Issue introduced with the recent change of the default value var_apparmor_mode from complain to enforce.
Configuration menu - View commit details
-
Copy full SHA for 34c3ecb - Browse repository at this point
Copy the full SHA 34c3ecbView commit details -
Tests for ensure_apparmor_enforce were failing because aa-complain and aa-enforce enabled the rsyslogd profile, which is disabled by default, thus marking it as an "unconfined process with a defined profile" and failing the SCE. Solution is to restart the service when loading the profiles. Tests for ensure_apparmor_enforce_or_complain were adapted to not load disabled profiles.
Configuration menu - View commit details
-
Copy full SHA for 7f33cf6 - Browse repository at this point
Copy the full SHA 7f33cf6View commit details -
Configuration menu - View commit details
-
Copy full SHA for fb6ac37 - Browse repository at this point
Copy the full SHA fb6ac37View commit details
Commits on Nov 11, 2024
-
Configuration menu - View commit details
-
Copy full SHA for d7b3438 - Browse repository at this point
Copy the full SHA d7b3438View commit details
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.