[Apparmor-general] seperate the abstractions and program-chunks from the profile package ?

[Dieter Bloms]

Hi,

On Thu, Aug 02, John Johansen wrote:

> splitting out profiles, and making it easier to disable profile you
> don't want does make sense and we are moving in that direction.

nice to hear.

> For sles9 the best I can currently recommend is for applications you don't
> want confined move their associated profiles out of /etc/apparmor.d/

this is no problem, but if novell provides an update, then the removed
profiles were there and make some application doesn't work as expected
and if you have to manage about 100 servers; a nightmare for me.

At the moment I replace those profile files with empty ones and hope the
update will not overwrite my empty profiles.


-- 
Gruß

  Dieter

--
I do not get viruses because I do not use MS software.
If you use Outlook then please do not put my email address in your
address-book so that WHEN you get a virus it won't use my address in the
From field.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://forge.novell.com/pipermail/apparmor-general/attachments/20070803/8c611388/attachment.pgp