[Apparmor-general] Re: Firefox not confined (openSUSE 10.3)?

[Crispin Cowan]

John Johansen wrote:
> On Sat, Oct 13, 2007 at 06:23:40PM +0200, Christian Boltz wrote:
>   
>> Did you ever test if it is possible to use the new tools on 10.2?
>>     
> I have run some of them under 10.2, but the system wasn't a clean
> 10.2 so I can't say that it has been truely tested under 10.3
>
>   
>> (I have some servers running, and syncing the profiles is quite annoying 
>> right now...)
>>
>> If yes, will there be any problems because of the new syntax elements?
>>     
> Well there shouldn't be.  In general the tools only ask for something
> if it exists in the logs, and since the 10.2 kernel does not log the
> elements, it should never ask for them.
>   
On the other hand, if you do manage to get the new tools running on
10.2, then they will start suggesting that you download profiles from
the portal, and those profiles will contain syntax elements that your
kernel cannot handle properly.

The portal tools were intended to separate profiles on the basis of
distro, so 10.2 profiles should not be confused with 10.3 profiles. But
this is the first release of the tools for the portal, so I don't know
how well that works.

Pro forma caveat: I do not speak for Novell.

Crispin

-- 
Crispin Cowan, Ph.D.               http://mercenarylinux.com/
	       Itanium. Vista. GPLv3. Complexity at work