action #520
closedupdate apparmor profile
Description
the apparmor profile needs to be updated to match the rpm package layout
Updated by lnussel over 11 years ago
- Target version changed from T06. Replace the Makefile by a conf. / dispatcher method to T11. Task for end of iteration
Updated by aplanas over 11 years ago
- Target version changed from T11. Task for end of iteration to T12. Issues for the next iteration
- Start date deleted (
2013-06-06)
Updated by aplanas almost 11 years ago
- Project changed from openQA improvement to openQA Project (public)
- Target version deleted (
T12. Issues for the next iteration)
Updated by lnussel almost 11 years ago
- Estimated time changed from 2.00 h to 4.00 h
Updated by mlin7442 almost 11 years ago
Could someone explain me more in detail about this action?
Updated by lnussel almost 11 years ago
Services that run on opensuse infrastructure must be confined with apparmor profiles. Since the deployment is going to be rpm packages the apparmor profile needs to be work with the rpm packages :-)
Updated by mlin7442 almost 11 years ago
- Status changed from New to In Progress
- % Done changed from 0 to 80
finished profile file https://build.opensuse.org/package/view_file/home:mlin7442:branches:security:apparmor/apparmor/usr.share.openqa.script.openqa?expand=1
started packaging it and will submit it to security:apparmor
Updated by lnussel almost 11 years ago
mlin7442 wrote:
finished profile file https://build.opensuse.org/package/view_file/home:mlin7442:branches:security:apparmor/apparmor/usr.share.openqa.script.openqa?expand=1
started packaging it and will submit it to security:apparmor
Max, please commit to the openqa git repo and add it to our packages as openQa is not in opensuse and still is subject to change
Updated by mlin7442 almost 11 years ago
- Status changed from In Progress to Resolved
- % Done changed from 80 to 100
commit to git done. submit to devel:openQA:devel done.
Updated by lnussel almost 11 years ago
- Status changed from Resolved to New
max, could you also take a look whether a profile the worker ie os-autoinst is feasible? It receives input from the web ui after all.
Updated by mlin7442 almost 11 years ago
lnussel wrote:
max, could you also take a look whether a profile the worker ie os-autoinst is feasible? It receives input from the web ui after all.
the worker doesn't lists in aa-unconfined so I just skip it, anyway, tomorrow I'll find out is there have any feasibility.
Updated by mlin7442 almost 11 years ago
- Status changed from New to In Progress
the profile for worker commit to git already, but need a tuning due to worker seems move to script/worker
Updated by alarrosa almost 11 years ago
- Target version changed from Sprint 02 to Sprint 03