Comment 3 for bug 918879

Revision history for this message
Mike Mestnik (cheako) wrote :

Jamie, thank you for that as I'm unfamiliar with Apparmor.

What do ppl think about ld.so.preload? To tell the truth I used to put tsocks in that file, but since FF has it's own socks client it can be excluded from loading tsocks. For the most part preload should be enabled, but there are some cases(like FF) where it might make sense to block preloads for security.

My stance is since ld.so.preload is something nearly every application should access, that it should never show up in an apparmor log. The reason being is that it says little more then this application was linked using ld.so and this information is pointless to log.