Differences between revisions 10 and 11
Revision 10 as of 2014-08-28 20:27:53
Size: 2378
Editor: ?IntRigeri
Comment: Make link text more generic.
Revision 11 as of 2014-08-29 03:11:12
Size: 2421
Editor: ?IntRigeri
Comment: Update a few addresses wrt. the team merger.
Deletions are marked like this. Additions are marked like this.
Line 3: Line 3:
 * [[http://anonscm.debian.org/gitweb/?p=collab-maint/apparmor-profiles-extra.git;a=summary|Git repository]]
 * [[https://alioth.debian.org/projects/pkg-aa-profiles/|Alioth project]]
 * [[http://anonscm.debian.org/gitweb/?p=collab-maint/apparmor-profiles-extra.git;a=summary|Git repository for extra profiles]]
 * [[https://alioth.debian.org/projects/pkg-apparmor/|Alioth project]]
Line 9: Line 9:
 * '''Email''': pkg-aa-profiles-team@lists.alioth.debian.org  * '''Email''': pkg-apparmor-team@lists.alioth.debian.org
Line 33: Line 33:
 * '''Fix usertagged''' [[https://udd.debian.org/cgi-bin/bts-usertags.cgi?user=pkg-aa-profiles-team@lists.alioth.debian.org|bugs]].  * '''Fix usertagged''' [[https://udd.debian.org/cgi-bin/bts-usertags.cgi?user=pkg-apparmor-team@lists.alioth.debian.org|bugs]].
Line 36: Line 36:
 * '''Import''' profiles from Ubuntu: get the latest version, test, prepare Debian patch against apparmor-profiles-extra, submit patch to the BTS.  * '''Import''' profiles from Ubuntu: get the latest version, test, prepare Debian patch against apparmor-profiles-extra, submit patch to the BTS or push a branch to collab-maint.

Infrastructure

Interacting with the team

Current status

Goals

For Jessie, we'd like more enforced profiles; specifically (in decreasing order of priority):

  1. some of the Usual Suspects™ on the Desktop: evince, iceweasel, isc-dhcp-client, pidgin;
  2. some software that is particularly important in the context of Tails and other privacy-sensitive contexts: Tor, Vidalia;
  3. some low-hanging fruits from Ubuntu's Supported profiles in main list: apache2, libvirt, ntp...

The general workflow wrt. profiles is to find existing profiles, test them in the context of Debian sid, adapt them if needed, and either include them into apparmor-profiles-extra, or propose them to Debian package maintainers.

At some point, it would be great to share the profiles maintenance e.g. with Ubuntu.

How to help

  • Test: ?enable AppArmor, enforce a bunch of profiles, report bugs and/or happiness.

  • Fix usertagged bugs.

  • Fix bugs in the packages we maintain

  • Fix bugs in the apparmor package.

  • Import profiles from Ubuntu: get the latest version, test, prepare Debian patch against apparmor-profiles-extra, submit patch to the BTS or push a branch to collab-maint.

  • Documentation: write documentation about the user side of things.

  • Convince Ubuntu to upstream their AppArmor profiles to Debian.

  • Organize by keeping the progress tracking page up-to-date.