1942
Comment: Import content from the main AppArmor page.
|
2498
|
Deletions are marked like this. | Additions are marked like this. |
Line 1: | Line 1: |
<<Navigation(siblings)>> ---- <<TableOfContents>> == Infrastructure == * [[http://anonscm.debian.org/gitweb/?p=collab-maint/apparmor-profiles-extra.git;a=summary|Git repository for extra profiles]] * [[https://alioth.debian.org/projects/pkg-apparmor/|Alioth project]] * [[https://udd.debian.org/bugs.cgi?release=jessie&merged=ign&fnewerval=7&flastmodval=7&apparmor=1&sortby=id&sorto=asc|Bugs in the packages we maintain]] <<Anchor(contactteam)>> == Interacting with the team == * '''Email''': pkg-apparmor-team@lists.alioth.debian.org * '''IRC''': ''#apparmor'' on irc.oftc.net (general AppArmor discussion channel) |
|
Line 4: | Line 20: |
* Some of us test a few AppArmor profiles, mainly grabbed from Ubuntu. * Patches to add profiles to Debian packages are being filed: [[http://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=new-profile;users=apparmor@packages.debian.org|Bugs tagged with "new-profile" (used for adding profiles to packages)]]. |
* See the [[AppArmor/Progress|progress tracking page]]. |
Line 7: | Line 22: |
== Next goals == | == Goals == |
Line 9: | Line 24: |
For Jessie, we'd like AppArmor enabled by default and more enforced profiles; specifically | For Jessie, we'd like more enforced profiles; specifically |
Line 16: | Line 31: |
The general workflow wrt. profiles is to find existing profiles, test them in the context of Debian sid, adapt them if needed, and propose them to Debian package maintainers. | The general workflow wrt. profiles is to find existing profiles, test them in the context of Debian sid, adapt them if needed, and either include them into apparmor-profiles-extra, or propose them to Debian package maintainers. |
Line 22: | Line 37: |
* '''Test''': [[AppArmor/HowTo|enable AppArmor]], enforce a bunch of profiles, report bugs and/or happiness. * '''Fix bugs''' tagged "new-profile". * '''Fix bugs''' in the apparmor source package. * '''Import''' profiles from Ubuntu: get the latest version, test, prepare Debian patch, file bug tagged "new-profile". |
* '''Test''': [[AppArmor/HowToUse|enable AppArmor]], enforce a bunch of profiles, report bugs and/or happiness. * '''Fix usertagged''' [[https://udd.debian.org/cgi-bin/bts-usertags.cgi?user=pkg-apparmor-team@lists.alioth.debian.org|bugs]]. * '''Fix bugs''' in [[https://udd.debian.org/bugs.cgi?release=jessie&merged=ign&fnewerval=7&flastmodval=7&apparmor=1&sortby=id&sorto=asc|the packages we maintain]] * '''Fix bugs''' in the DebianPts:apparmor package. * '''Import''' profiles from Ubuntu: get the latest version, test, prepare Debian patch against apparmor-profiles-extra, submit patch to the BTS or push a branch to collab-maint. |
Line 28: | Line 44: |
== Contact Information == We have no mailing-list yet, but once you and others tell us you want to join the dance, it may be worth creating one; in the meantime: * intrigeri (intrigeri@debian.org) * AppArmor maintainers (apparmor@packages.debian.org) |
* '''Organize''' by keeping the [[AppArmor/Progress|progress tracking page]] up-to-date. |
/Contribute /Contribute/FirstTimeProfileImport /Contribute/MergeProfileFromUpstream /Contribute/Upstream /Debug /HowToUse /OutReachyRound9 /Progress /Reportbug /UserStories |
Infrastructure
Interacting with the team
IRC: #apparmor on irc.oftc.net (general AppArmor discussion channel)
Current status
Debian Wheezy supports AppArmor.
See the progress tracking page.
Goals
For Jessie, we'd like more enforced profiles; specifically (in decreasing order of priority):
- some of the Usual Suspects™ on the Desktop: evince, iceweasel, isc-dhcp-client, pidgin;
- some software that is particularly important in the context of Tails and other privacy-sensitive contexts: Tor, Vidalia;
some low-hanging fruits from Ubuntu's Supported profiles in main list: apache2, libvirt, ntp...
The general workflow wrt. profiles is to find existing profiles, test them in the context of Debian sid, adapt them if needed, and either include them into apparmor-profiles-extra, or propose them to Debian package maintainers.
At some point, it would be great to share the profiles maintenance e.g. with Ubuntu.
How to help
Test: enable AppArmor, enforce a bunch of profiles, report bugs and/or happiness.
Fix usertagged bugs.
Fix bugs in the packages we maintain
Fix bugs in the apparmor package.
Import profiles from Ubuntu: get the latest version, test, prepare Debian patch against apparmor-profiles-extra, submit patch to the BTS or push a branch to collab-maint.
Documentation: write documentation about the user side of things.
Convince Ubuntu to upstream their AppArmor profiles to Debian.
Organize by keeping the progress tracking page up-to-date.