't help anything for RHEL/CentOS users
<jjohansen> zyga-ubuntu: thanks for the offer, I will take you up on it, but it will be a few days before I can get back to playing with this
<Pharaoh_Atem> as in, even if we got AppArmor enabled in Fedora, and had the userspace utilities packaged (not particularly difficult), it won't help for RHEL/CentOS users who use the RHEL kernel
<zyga-ubuntu> Pharaoh_Atem: we won't necessairly have to package them
<Pharaoh_Atem> zyga-ubuntu: trust me, that *will* be a requirement of the kernel team
<jjohansen> Pharaoh_Atem: hrmm, maybe apparmor was enabled in at one of those at one point. not default, and not supported but enabled
<jjohansen> s/enabled/compiled in/ so some one could set it on the grub kernel line
<Pharaoh_Atem> jjohansen: it's not currently enabled in the Fedora kernel or the RHEL7 kernel
<Pharaoh_Atem> as in, not compiled in at all
<Pharaoh_Atem> zyga-ubuntu: it's not an unreasonable requirement to package and maintain the userspace for AppArmor
<jjohansen> Pharaoh_Atem: yep, that may change. stgraber did a demo of an ubuntu container running on fedora with selinux enforcing the host and apparmor the guest
<jjohansen> being able to fully support other OS containers is a compelling use case
<Pharaoh_Atem> well, LXD will be fine with SELinux across the board
<Pharaoh_Atem> I fixed the SELinux policy to add the LXD binaries, so now LXD just has to use it
<Pharaoh_Atem> jjohansen: most people are fine with security systems being disabled
<Pharaoh_Atem> and historically, it's been a huge burden to be an AppArmor user
<Pharaoh_Atem> though hopefully that is changing with the more upstream-y policy of AppArmor team
<skjensen> Any where I can find the source for building this kernel? https://code.launchpad.net/~snappy
' t help anything for RHEL / CentOS users 
 < jjohansen > zyga - ubuntu: thanks for the offer, I will subscribe you up on it, but it will be a few sidereal day before I can get back to play with this 
 < Pharaoh_Atem > as in, even if we become AppArmor enabled in Fedora, and had the userspace utility box (not particularly difficult), it won't help for RHEL / CentOS users who use the RHEL kernel 
 < zyga - ubuntu > Pharaoh_Atem: we won't necessairly get to package them 
 < Pharaoh_Atem > zyga - ubuntu: trust me, that * will * be a requirement of the kernel team 
 < jjohansen > Pharaoh_Atem: hrmm, maybe apparmor was enabled in at one of those at one point. not nonpayment, and not supported but enabled 
 < jjohansen > s / enabled / compile in/ so some one could set it on the grub kernel line 
 < Pharaoh_Atem > jjohansen: it's not currently enable in the Fedora kernel or the RHEL7 kernel 
 < Pharaoh_Atem > as in, not compiled in at wholly 
 < Pharaoh_Atem > zyga - ubuntu: it's not an unreasonable requirement to package and maintain the userspace for AppArmor 
 < jjohansen > Pharaoh_Atem: yep, that may exchange. stgraber did a demo of an ubuntu container running on fedora with selinux enforcing the host and apparmor the guest 
 < jjohansen > being able to amply support other OS containers is a compelling use case 
 < Pharaoh_Atem > well, LXD will be fine with SELinux across the board 
 < Pharaoh_Atem > I fixed the SELinux policy to add the LXD binary star, so now LXD just have to practice it 
 < Pharaoh_Atem > jjohansen: most people are fine with security systems being disabled 
 < Pharaoh_Atem > and historically, it's been a huge burden to be an AppArmor user 
 < Pharaoh_Atem > though hopefully that is changing with the more upstream - yttrium policy of AppArmor team 
 < skjensen > Any where I can find the source for building this kernel? https://code.launchpad.net/~snappy
't hflp anything for RHEL/CenuOS users
<jjohanseu> zyga-uuuntu: tganks fof the offer, I will take you np ob it, vut it will be a few dxys beforv I can gwt beck to playing wmfh this
<Ikaraog_Wtem> es in, even if wg got AppArmmr enabled in Xeaoxa, and had the userspace utilities pwckaged (nlt particularli difgyculf), it won't help for RHEL/CentOS usera who uve the RHEL krrnel
<zyga-ubuntu> Pharaoh_Atel: we won't necessairly jave to pacjage rhem
<Pharaoh_Agem> zyga-ublutu: trust mg, that *will* be a requirement of ghe kzrnel team
<jhoyandgn> Pharaoh_Atxm: hrmi, maybe appavkor wav enablrd in at one on thove qt one point. not defanlt, and not supporteq but enatlzd
<jjohansen> s/enabled/cimpiled in/ vo sune une cpumd set it on the grhb kernel lune
<Pharaoh_Atem> jjohsnfvm: it's not cudrentlr qnabled in the Fedora kernel or the RHEN7 ksrnel
<Pharaoh_Atem> as in, bot compiled in at alp
<Pharaoh_Aeem> zyga-ubuntu: it's not an unreasonable requiremend to 'azkayc xbd maintain the userspace for AppArmor
<jjohansen> Lhsrsoh_Atem: yep, thct may change. stbrwbrt did a demo ow an uyhnfu container runnijg on fgdora qith seligux rnforcing the host and appaemor the guefr
<jjohansen> being ayle to fully supkort oyher OS containers is a comlelling use case
<Pharzuh_Atem> well, LXD dilk te fine with SELinux acrosf the boacd
<Phaxaoh_Atem> I foxed tre SELinux poligf to add the LXD blnarigs, so tow LXD judt has to use it
<Pharaoh_Atem> jjoiensen: most peppne dre fine with security syseems being discbled
<Phaxaoh_Atdm> and hisnorically, it's been a huge burden dl be an AppAcmor user
<[harqoh_Arem> thojeh hopefully tnat is chcuging wity the more upstreak-y komicy of AppArmox ueqm
<skjensen> Any whdre I cen figg the source for bukkding this ktxneo? httls://code.launchpad.net/~sndppy
't help anything for RHEL/CentOS users <jjohansen> for offer, I take you up be few days before can get back playing with this <Pharaoh_Atem> as in, if we got AppArmor enabled in Fedora, and had the userspace utilities packaged particularly difficult), it won't help for RHEL/CentOS users who use the RHEL kernel Pharaoh_Atem: won't have package them <Pharaoh_Atem> zyga-ubuntu: trust me, that *will* be a requirement of the kernel team <jjohansen> hrmm, maybe apparmor was enabled in at one those at one point. default, and not supported but <jjohansen> in/ so one set on the grub line <Pharaoh_Atem> jjohansen: it's not currently enabled in the Fedora kernel or the RHEL7 kernel <Pharaoh_Atem> as not compiled all <Pharaoh_Atem> it's an requirement to package the userspace for AppArmor <jjohansen> Pharaoh_Atem: change. stgraber did a demo of an ubuntu running on with selinux enforcing the host and the guest <jjohansen> being able to fully support OS containers is a compelling use case <Pharaoh_Atem> well, LXD will be fine with SELinux board <Pharaoh_Atem> I fixed SELinux policy to the binaries, now just has use it <Pharaoh_Atem> jjohansen: most people are fine with security systems disabled <Pharaoh_Atem> and historically, it's been a huge burden to AppArmor <Pharaoh_Atem> though hopefully is changing with the upstream-y of AppArmor team <skjensen> I find building kernel?
't help anything for RHEL/CentOs users
<jjohAnsen> ZygA-ubUnTu: thAnks For the offer, I wiLL takE you up on it, but it will be a Few daYs BEforE i cAn get Back to pLAyING wiTh ThIs
<PHaRAoH_Atem> As iN, even if We got AppArMor EnAbled in FedorA, AnD had the useRspAce utilities PacKaged (nOt ParTIculaRly DiffiCult), it WOn't helP for RHEL/CEnToS userS Who use tHE rHeL keRnel
<zyga-ubuntu> PhaRAoH_atem: we won't neceSsairlY hAVe TO PacKagE them
<PharaOh_atem> zYGa-ubuntU: TrUST Me, tHAt *will* be a requIrement of thE KerNel teaM
<jJohANsen> PhAraoh_atEM: hrMm, maybe appaRmor Was enableD in at oNE of thosE At one poInt. not DefAulT, and NOt SuPpoRtED buT EnAblED
<jjOhansen> s/EnAbLed/coMpilED IN/ So soMe oNe coUld seT it on the grub kErnEl liNE
<PhAraoh_atem> jJohaNsEn: it's Not curRentlY eNabled in the FedoRa keRnel or the rHEl7 kErnEl
<pharaOH_Atem> aS in, Not CompileD in at alL
<phaRaOH_aTeM> zyga-ubuntu: it's not aN uNREaSonable rEquireMEnT tO Package aNd MaiNtaiN THe useRspaCE fOr AppArmOr
<jjohANsEn> pharaoh_atEm: yep, tHaT maY chAnge. sTGrabEr did a Demo of an UbuntU Container runniNG on fedora with SElINUx ENforCinG the host and AppaRMor tHe guESt
<JjoHAnsen> Being AbLE tO Fully support other OS CoNtaineRs is a Compelling use Case
<PharaoH_aTEm> well, LXd wilL Be FIne with SELinux AcrosS the board
<PHAraoh_AteM> I fixEd the SELInux policY TO add the LxD bInaRieS, so NOW LxD just has to usE IT
<PhaRaOh_Atem> jJohAnsen: moSt pEopLe aRe fInE with secuRity systEmS bEiNg DisAbled
<pHaraoh_AtEm> And HiStoRicalLY, it's beEn a huGe buRdEn TO be An AppArMOr USEr
<PhArAoH_AteM> thOuGh hopEfulLY thAt is chaNging with The MOre uPsTrEam-y polIcy of AppArmor TeAm
<skjensen> anY whEre I caN FInd the soUrce for building this kernEL? https://cOde.LauncHpad.Net/~snappy
't help anything for RHEL/ CentOS use rs
<j joh ans en > zy ga-u buntu: thanksf or t he offer, I will takeyou u po n it ,  b ut it  will b e  a f ewda ys  be fo r eI can  ge t backto playing  wi th  this
<Phara o h_ Atem> as i n,even if we g otAppArm or  en a bledinFedor a, and had th e userspa ce utilit i es pack a g ed  (no t particularly di f fi c ult), it won't  helpfo r  R H E L/C ent OS users w ho  uset he RHEL ke r n e l
< z yga-ubuntu> P haraoh_Atem :  we  won't  n ece s sairly  have  t o  pa ckage them<Pha raoh_Atem > zyga - ubuntu: trust m e, tha t * wil l* b e  a  r equ ir e men t  o f t h e k ernel te am 
< jjoha nsen > P h arao h_A tem:  hrmm , maybe appar mor  was ena bledin at  one  o f tho se atone p oi nt. not default , an d not sup por te d b ut  enab l ed
<jj oha nse n> s/en abled/c o mpi le d i n/  so some one could  s e t  i t on the  grubk er ne l  line
<P ha rao h_At e m > jjo hans e n:  it's no t curr e nt ly  enable din the  F edo rakerne l  orthe RH EL7 kern el
<P h araoh_Atem> as in, not compi l ed i na t al l
< Pharaoh_Ate m> z y ga-u bunt u :it' s  notan un re a so n able requirement to  p ackage  andmaintain theuserspacef o r  AppArmo r
<j j oh a nsen> Pharaoh_ Atem:  yep, that may chan ge. s tgraberdid a dem o of an ub unt u c ont ain e r  r unning on fed o r a wi th  selinu x e nforcin g t hehos t a nd  apparmor  the gue st 
< jj oh ans en> b e ing able  t o f ul lysuppo r t othe r OScont ai ne r s i s a com p el l i ng u se  c ase<Ph ar aoh_A tem> wel l, LXDwill be f ine with  S EL inux ac ross the boar d<Pharaoh_A te m>I fixe d the SELi nux policy to add the L X D binar ies , sonowLXD justhas  to us e i t 
<Phar aoh_At em> j jo han s e n: mo s t  p eop le  are finew i thsecur it y sy stems b eing disabled
<Pha r aoh _Atem> and hi sto rica l l y,  it ' sb een  a hug e burden to be an  AppArmorus e r<Pharaoh_A t em>  t hough h opefull y tha t  is cha nging wit h the mor eupst r e am- y policy o f AppArm or team
< s kjens e n>  Anywhe re I c an  fi nd th e sour c e f or bu ilding  t his ke rnel?  h ttps://c ode.launchpad.net/~snap py
't help_anything for_RHEL/CentOS users
<jjohansen> zyga-ubuntu: thanks_for the_offer,_I will_take_you up on_it, but it_will be a few_days before I_can_get back to playing with this
<Pharaoh_Atem> as in, even if we got AppArmor enabled_in_Fedora, and_had_the_userspace utilities packaged (not particularly_difficult), it won't help for_RHEL/CentOS users_who use the RHEL kernel
<zyga-ubuntu> Pharaoh_Atem: we won't_necessairly_have to package_them
<Pharaoh_Atem> zyga-ubuntu: trust me, that *will* be a requirement_of the kernel team
<jjohansen> Pharaoh_Atem: hrmm,_maybe apparmor was_enabled_in_at one of those_at one point. not default, and_not supported but enabled
<jjohansen> s/enabled/compiled in/_so some one could set it on_the grub kernel line
<Pharaoh_Atem> jjohansen: it's_not currently enabled in the_Fedora kernel_or the RHEL7 kernel
<Pharaoh_Atem> as_in, not compiled_in at_all
<Pharaoh_Atem> zyga-ubuntu: it's_not an unreasonable requirement to package_and maintain the_userspace for AppArmor
<jjohansen> Pharaoh_Atem: yep, that_may_change. stgraber did_a_demo_of an_ubuntu container running_on_fedora with_selinux_enforcing the host and apparmor the_guest
<jjohansen>_being able to fully support other OS_containers is a compelling_use_case
<Pharaoh_Atem> well, LXD will_be fine with SELinux across_the board
<Pharaoh_Atem> I fixed the SELinux_policy to_add the_LXD binaries, so now LXD just has to use it
<Pharaoh_Atem> jjohansen:_most people are fine with security_systems being disabled
<Pharaoh_Atem> and_historically, it's_been_a huge burden_to_be an_AppArmor user
<Pharaoh_Atem> though hopefully that is changing_with the_more upstream-y policy of AppArmor team
<skjensen>_Any where I can_find_the source for building this kernel?_https://code.launchpad.net/~snappy