"Is it OK to drop the leaf-net and unconfined components from the path?
Currently, a confined scope relies on being able to create the final
path component *itself* by calling mkdir(). So, assuming that
~/.local/share/unity-scopes/leaf-net exists, the scope will try to
create ~/.local/share/unity-scopes/leaf-net/@{APP_PKG_NAME}."

No. This is important for isolation between scopes if we ever decide to
support other scope templates to protect against certain types of
attacks via differently versioned apps.

** Also affects: click-reviewers-tools (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: click-reviewers-tools (Ubuntu)
       Status: New => In Progress

** Changed in: apparmor-easyprof-ubuntu (Ubuntu)
       Status: Triaged => In Progress

** Changed in: click-reviewers-tools (Ubuntu)
   Importance: Undecided => High

** Changed in: click-reviewers-tools (Ubuntu)
     Assignee: (unassigned) => Jamie Strandboge (jdstrand)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1384286

Title:
  add directory allowing scopes and apps to share data

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1384286/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to