summaryrefslogtreecommitdiffstats
path: root/wiki/src/blueprint/audit_AppArmor_profiles.mdwn
diff options
context:
space:
mode:
authorintrigeri <intrigeri@boum.org>2015-05-30 20:46:07 +0000
committerintrigeri <intrigeri@boum.org>2015-05-30 20:46:07 +0000
commitdf37f2b471c5c0678634fc5d5732eacf75bd01fb (patch)
treed18be4b8d6111b2edcf5ef97e5c7f0a033510a55 /wiki/src/blueprint/audit_AppArmor_profiles.mdwn
parent4a9a2f56e24c8063d85896e9b4ae12822e231eec (diff)
Add test result.
Diffstat (limited to 'wiki/src/blueprint/audit_AppArmor_profiles.mdwn')
-rw-r--r--wiki/src/blueprint/audit_AppArmor_profiles.mdwn6
1 files changed, 3 insertions, 3 deletions
diff --git a/wiki/src/blueprint/audit_AppArmor_profiles.mdwn b/wiki/src/blueprint/audit_AppArmor_profiles.mdwn
index de57756..929e8c0 100644
--- a/wiki/src/blueprint/audit_AppArmor_profiles.mdwn
+++ b/wiki/src/blueprint/audit_AppArmor_profiles.mdwn
@@ -24,9 +24,9 @@ Things to check
(that's a symlink to `/lib/live/mount/overlay`, created in
[[!tails_gitweb_commit 3233da6]]; maybe it's not needed
anymore?)
- * test how AppArmor confinement behaves wrt.
- `/lib/live/mount/overlay` (at least it blocks access for Evince
- to `/lib/live/mount/overlay/home/amnesia/.gnupg/default.pdf`)
+ * test result: indeed, AppArmor confinement is now broken wrt.
+ `/lib/live/mount/overlay` (at least it allows Tor Browser to access
+ stuff in `/lib/live/mount/overlay/home/amnesia/.gnupg/`);
* we add `/lib/live/mount/overlay/home/` to `HOMEDIRS`, so at
least `$HOME` is OK -- isn't it?
- recheck all these things with persistence in read-only mode