Dienstag, 26. Mai 2015
Geschrieben von Christian Boltz
in Computer, english, Linux
um
00:42
| Kommentare (0)
| Trackbacks (0)
Happy Towel Day! - or: How to DoS an open source projectHappy Towel Day! I know I'm a bit late for the people living in germany, but it's still early enough for those living on the other side of the planet ;-) - especially for the other AppArmor developers! Yesterday and today, I sent a flood of patches to the AppArmor mailinglist. You can easily see this as a (productive) DoS attack because AppArmor has a policy that every patch must be reviewed within a week... Including some patches from the last days that didn't get a review yet, I have the answer - 42 patches pending for the AppArmor utils :-) The biggest patches move the handling of change_profile and rlimit rules into classes and add tests for them. Another set of patches starts to unify the code of aa-logprof and aa-mergeprof (and fixes some bugs while doing that). The patch flood also contains some small bugfix and cleanup patches. I'm quite sure the other developers will need some time to review all those patches *g* If you are interested what exactly I changed, have a look at the AppArmor mailinglist archive and check my mails with the [patch] prefix. For those who are more interested in statistics, here's the diffstat of my patch flood: /aa-mergeprof | 517 +++++++++++++--------------------- /apparmor/aa.py | 363 +++++++++-------------- /apparmor/regex.py | 7 /apparmor/rule/__init__.py | 41 ++ /apparmor/rule/capability.py | 11 /apparmor/rule/change_profile.py | 19 + /apparmor/severity.py | 13 /apparmor/tools.py | 11 /test/minitools_test.py | 11 /test/test-aa.py | 29 + /test/test-baserule.py | 5 /test/test-capability.py | 32 ++ /test/test-change_profile.py | 18 + /test/test-severity.py | 25 - utils/aa-audit | 1 utils/aa-cleanprof | 1 utils/aa-complain | 1 utils/aa-disable | 1 utils/aa-enforce | 1 utils/aa-mergeprof | 50 ++- utils/apparmor/aa.py | 34 -- utils/apparmor/regex.py | 10 utils/apparmor/rule/__init__.py | 6 utils/apparmor/rule/capability.py | 14 utils/apparmor/rule/change_profile.py | 173 +++++++++++ utils/apparmor/rule/network.py | 16 + utils/apparmor/rule/rlimit.py | 265 +++++++++++++++++ utils/apparmor/severity.py | 4 utils/apparmor/tools.py | 7 utils/test/common_test.py | 22 + utils/test/minitools_test.py | 25 - utils/test/test-aa.py | 55 +++ utils/test/test-baserule.py | 4 utils/test/test-capability.py | 46 --- utils/test/test-change_profile.py | 443 +++++++++++++++++++++++++++++ utils/test/test-example.py | 4 utils/test/test-network.py | 17 + utils/test/test-rlimit.py | 468 ++++++++++++++++++++++++++++++ utils/test/test-severity.py | 201 ++++--------- 39 files changed, 2183 insertions(+), 788 deletions(-)
Trackbacks
Trackback-URL für diesen Eintrag
|
KommentareChristian Boltz zu AppArmor 2.12 - The Grinch is confined!
Do., 04.01.2018 17:17
I'd also prefer to be able to
redirect "restart" to
"reload" - but unfortunately
the systemd developers
didn't lik [...]
Gianluca Frustagli zu AppArmor 2.12 - The Grinch is confined!
Do., 04.01.2018 15:37
Hi,
even considered the
existence of the
"aa-teardown" command I
don't think this is a good
idea both from a "phy [...]
Andreas zu PostfixAdmin 3.0.2
Do., 09.02.2017 08:43
Thanks for making and
maintaining this great piece
of software!
So., 01.01.2017 14:36
Christian Boltz zu PostfixAdmin 3.0
So., 13.11.2016 20:32
The *Handler classes
basically map between
database and user interface
(read and write mode,
including error check [...]
Oliver zu PostfixAdmin 3.0
Sa., 12.11.2016 10:04
Hi Christian
First of all,
thanks for postfixadmin.
I
am just adding some
functionality but could need
some he [...]
Mo., 12.09.2016 05:50
victorhck zu Jeopardy!
So., 17.07.2016 14:10
yes! send me that, and I'll
check it out! ;)
Thanks
in advance! :)
Christian Boltz zu Jeopardy!
Do., 14.07.2016 00:45
I'm not sure if someone took
photos ;-)
Yes, you can
download it and run it
locally (even offline) - but
I shou [...]
victorhck zu Jeopardy!
Mi., 13.07.2016 23:27
Hi !
Would be great to see
some pics from OSC'16 playin
this :)
Downloading the
package I can run in my PC
loc [...]
Mo., 04.07.2016 21:35
Fr., 22.05.2015 21:30
Eine sehr gute Idee, das
Ganze von der anderen Seite
zu betrachten (von der Seite
der schlechten Programmierer
:) [...]
Christian Boltz zu Releases!
Mo., 29.08.2011 16:44
Sourceforge hat auf der
"Files"-Seite jedes Projekts
einen RSS-Feed im Angebot
(rechts über der
Dateiliste).
Fü [...]
prego zu Releases!
Mo., 29.08.2011 10:54
Gibt es fuer postfixadmin
eigentlich irgendeine
release Mailingliste oder
Website die ich per RSS
abbonieren kann, [...]
Kaktustier zu Die BESTEN der BESTEN der BESTEN, SIR!
Mo., 01.08.2011 01:57
Nimm die Fußzeile weg, dann
stimmt's ^^
ArchiveKategorienBlog abonnierenImpressum |