Apparmor suggestion to include more profiles

Jean-Christophe Baptiste <[email protected]> Sun, 29 May 2016 15:37:07 +0200
Newsgroups gmane.linux.suse.security
Message-ID <[email protected]>
Hello,

It is a nice thing that openSUSE includes apparmor by default. I started to play with it on Leap 42.1.

However, I feel it is a little short in term of profiles for the desktop (all profiles are server oriented).

In comparison, I retrieved the profiles in Ubuntu :

	bzr co lp:apparmor-profiles

They have some profiles for chromium, firefox, empathy, totem, thunderbird and evolution among others. Some big candidates are still missing though, like Wireshark.

I feel such profiles are important, because these applications are rather exposed regarding modern threats.

Do you think it would be legally possible to include them more or less as is in Leap 42.2 and all future releases?
Or at least, is there any plan to develop more profiles for the desktop?

Thank you in advance for your reply,

Best regards,
Jean-Christophe
signature.asc (application/pgp-signature, 819 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=uxSc
-----END PGP SIGNATURE-----