[Apparmor-dev] Re: AppArmor 2.1 Feature Overview

[S.Çağlar Onur]

Hi All;

13 Ağu 2007 Pts tarihinde, Dominic Reynolds şunları yazmıştı: 
> ....repost - incorporating feedback.
> 
> -----------------
> 
> Per the irc discussion on #apparmor I wanted post for review the planned changes
> around the 2.1 release for AppArmor. This release will ship as part of
> openSUSE 10.3 and Ubuntu "gutsy". Feedback/corrections welcome :)

As you may already know Pardus 2007 already ships appArmor on its default installation from December 2006 :)
And we are closely watching current development and we will also planning ship new appArmor with our new 
releases. 

> This version will be also released as tarballs and maintained in a branch on
> forge svn.

+1

> o Support for Network Repository for profile storage
> 
>   The AppArmor profile tools now interact with local and remote repositories of
>   profiles to supply the user with profiles when profiles are needed for
>   applications and to allow central storage of AppArmor profiles accross
>   multiple machines.
> 
>   * Selecting profiles from a repository:
>     The user is prompted to select a profile from one or more users in the
>     network repository or from the local inactive profile repository
>     (/etc/apparmor/profiles/extras). 
> 
>   * Storing profiles in a repository
>     The user has the option of storing profiles in a remote repository. The user
>     is reqiured to supply a username, password, and email address to
>     create/access an account on the repository server and then the
>     new/changed profiles can be stored on the remote server.

Wonderfull news :)

But it triggered another question in my mind, what about default profiles shipped with appArmor. 
Currently we are using some sed/awk magic to convert openSuse based profiles to Pardus specific ones 
and i think currently this is also what mandriva and ubuntu does. 

I'm sure this community based approach will solve lots of problems but i want to know what other distros 
(suse, ubuntu, mandriva) planning? Will you provide appArmor as just a abstraction and encourage your users to 
create their own profiles or will you provide feature-complete profile sets for your distros default installation?
 
> o AppArmor Desktop Applet for Gnome
> 
>     A desktop applet for gnome that AppArmor events via dbus.

Any plan for KDE specific one or make this applet interactive instead of just giving information about events?

Cheers
-- 
S.Çağlar Onur <caglar at pardus.org.tr>
http://cekirdek.pardus.org.tr/~caglar/

Linux is like living in a teepee. No Windows, no Gates and an Apache in house!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url : http://forge.novell.com/pipermail/apparmor-dev/attachments/20070814/e35b34a8/attachment.pgp