Kees Cook <[email protected]> writes:

>> +  @{HOME}/.WorldOfGoo/** rw,
>
> is @{HOME}/.WorldOfGoo/ rw, also needed to initially create the
> directory on first-run?

Good point, fixed in r83.  I've also now tested it with a fresh user to
make sure I didn't missing else.

> Hrm. I thought "m" should only be for _executable_ mmaps, which would
> imply that the READ_IMPLIES_EXEC personality bit was set, implying the
> binaries have executable stacks. But now I can't reproduce this
> behavior. Can you run "execstack -q" on the ELFs?

| james@ornery:~$ execstack -q /opt/WorldOfGoo/WorldOfGoo.bin64 
| X /opt/WorldOfGoo/WorldOfGoo.bin64

-- 
James

-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to