Skip to content
  • Jamie Strandboge's avatar
    This patchset is broken into 4 parts: · 1db463f4
    Jamie Strandboge authored
    
    * the application, library, documentation and installation script
    * the initial templates and policy groups. This will undoubtedly need
      refinement as we get feedback from users. Initial policy is based on Ubuntu's
      Application Review Board (ARB) requirements[2].
    * tests for the library
    * Makefile integration
    
    Templates are stored in /usr/share/apparmor/easyprof/templates and policy
    groups in /usr/share/apparmor/easyprof/policygroups. This can be adjusted via
    /etc/apparmor/easyprof.conf.
    
    The aa-easyprof.pod has complete documentation on usage with some
    additional information in utils/easyprof/README (mostly duplicated
    here).
    
    Testing can be performed in a number of ways:
    $ cd utils ; make check # runs unit tests and pyflakes
    
    Unit tests manually:
    $ ./test/test-aa-easyprof.py
    
    In source manual testing:
    $ ./aa-easyprof --templates-dir=./easyprof/templates \
                    --policy-groups-dir=./easyprof/policygroups \
                    ... \
                    /opt/foo/bin/foo
    
    Post-install manual testing:
    $ make DESTDIR=/tmp/test PERLDIR=/tmp/test/usr/share/perl5/Immunix install
    $ cd /tmp/test
    $ PYTHONPATH=/tmp/test/usr/local/.../dist-packages ./usr/bin/aa-easyprof \
        --templates-dir=/tmp/test/usr/share/apparmor/easyprof/templates \
        --policy-groups-dir=/tmp/test/usr/share/apparmor/easyprof/policygroups \
        /opt/bin/foo
    
    (you may also adjust /tmp/test/etc/apparmor/easyprof.conf to avoid
    specifying --templates-dir and --policy-groups-dir).
    
    Committing this now based on conversation with John and Steve.
    
    Acked-By: default avatarJamie Strandboge <jamie@canonical.com>
    1db463f4