=== duflu_ is now known as duflu === Guest90584 is now known as dk [06:32] So. On a lark I installed Ubuntu Touch on my Nexus 7. Now, though it seems to be working, I can't figure out anything to actually do with it and can't seem to find any manuals. Any advice? [06:38] ubuntu-touch has an intro howto use it the first time [07:13] good morning [07:14] morning [08:02] eu na? [08:02] 81,82 ghetlela ahe [08:02] sorry [08:02] wrong channel === EuaD is now known as ubuntuaddicted [09:53] Good morning all; happy Friday, and happy Underdog Day! :-D === VDVsx_ is now known as VDVsx [11:14] Hi, is there some place where I can buy Ubuntu-tablets here in Europe? [11:15] none on Amazon? [11:17] nandersson, there are none in the market at the moment [11:17] beuno, ah, a pity :) === _salem is now known as salem_ === salem_ is now known as _salem [13:31] what is the latest stable image? #12? === _salem is now known as salem_ === salem_ is now known as _salem [14:51] mardy: on mako? i think so [14:59] dobey: thanks [15:32] im going to give ubuntu-touch a go again [15:51] jcbjoe: are you using multirom or you just flashing between android and ubuntu as the only system on the phone? [15:52] ubuntu will be the only system on the phone [15:53] ubuntu-touch/ubuntu-rtm/14.09 < -- this command [15:55] i smell coffee [15:55] dobey: the actualy handsets with the finished models won't be out till like 2015 right ? [15:56] jcbjoe: right [15:56] Q1 ? [15:56] http://www.omgubuntu.co.uk/2014/12/bq-ubuntu-phone-launches-in-europe-this-february [15:57] but of course Europe! [15:58] everything is in europe! [16:00] dobey: this is r12 build or if im saying it right .. it feels snappy also scopes looks way diffrent from r10 and r11 [16:02] eh? [16:02] oh, the new scope management ui is in rtm now [16:03] the last time i was on ubuntu-touch in the about section it said r10 .. it says r12 now .. it feels very snappy/fast .. the scopes is diffrent and it feels very smooth just the whole thing [16:03] the scopes themselves should be the same [16:03] what changed is the ui for managing which scopes you have favorited and such [16:04] oh yea i can uncheck or check a start next to it [16:06] i got to read up on how to use scopes [16:07] jdstrand: ping [16:14] mardy: hey [16:14] jdstrand: hi! I think I'm ready to test the plugin confinement branch, but I need the plugins to actually be confined :-) [16:15] jdstrand: do you know when you'll be able to work on the apparmor side of the issue? [16:17] mardy: not today, it will have to be after the holiday, but I can advise you on how to [16:18] mardy: create a click that ships it, so that there is a label. don't mind that crt fails, just make sure the click is otherwise setup correctly [16:18] jdstrand: well' I won't have time until after the holidays either, but if you think you'll be busy even after the holidays, then maybe you could send me an email with the infos [16:18] mardy: then try running it. look for denials in /var/log/syslog [16:18] mardy: then adjust /var/lib/apparmor/profiles/click_your_click_profile [16:19] running "sudo apparmor_parser -r /var/lib/apparmor/profiles/click_your_click_profile' after each time you change it [16:19] mardy: eventually you'll have a set of rules that we can add to a policy group [16:20] (and you can add those to the bug) [16:20] jdstrand: wait... AFAIK, it will have to be s/adjust/create/ [16:20] I won't be able to spend a ton of time on it, cause I've got a lot of snappy stuff to do, so it would be helpful if you iterated and thought about the rules to make sure they were sane [16:20] jdstrand: or are profiles already created even for account plugins? [16:21] mardy: I'm saying just treat it like an app for the moment and you'll see all the denials as you try to use it [16:23] jdstrand: OK, so I should also adjust the test so that we call aa_change_profile on an existing app profile [16:23] do you have an example click already? [16:25] jdstrand: reminders-app could be one [16:25] let me look at it [16:25] jdstrand: it comes with the evernote plugin [16:33] mardy: ok [16:33] mardy: this is the reminders manifest: [16:34] http://paste.ubuntu.com/9571128/ [16:34] mardy: notice how "evernote-account-plugin" doesn't specify "apparmor" in its list of hooks? [16:36] jdstrand: yep [16:37] jdstrand: do you think I can add it there? [16:37] mardy: I know you can :) [16:37] jdstrand: cool [16:37] mardy: just do "apparmor": "evernote-account-plugin.apparmor" (or whatever) [16:38] mardy: the question then becomes how much do you want to start with [16:38] for the first pass, use: [16:38] { [16:38] "template": "unconfined", [16:38] "policy_groups": [], [16:38] "policy_version": 1.2 [16:38] } [16:39] jdstrand: ok [16:39] mardy: that will give it the label you are looking for, but should allow everything through [16:39] jdstrand: ah, and another easy :-) question: if aa_change_profile() fails, I guess I should exit the process, right? [16:40] jdstrand: it would fail, if I specify an unexisting profile, right? [16:41] mardy: once you are satisfied that is working, you might change the template to "ubuntu-push-helper" since it is more minimal that "ubuntu-sdk" and it might give you a better idea of the denial and what should be in the policy group [16:42] aa_change_profile() should fail, yes, but I'm going to point you at tyhicks for that question [16:42] tyhicks: can you advise mardy on aa_change_profile() and perhaps if he should use aa_change_onexec() instead? [16:42] sure [16:43] mardy: correct, those calls will fail if the profile doesn't exist [16:43] mardy: (re ubuntu-push-helper-- do note there are explicit denials in there, so be sure to check the policy to make sure it will do what you want [16:44] mardy: if you care about detecting that specific condition, -1 will be returned and errno will be set to ENOENT [16:45] mardy: re aa_change_profile() vs aa_change_onexec(), I prefer to use aa_change_onexec() [16:45] mardy: I like it a little better because you can call it in advance, do other things, and then you don't change into the new profile until the call to exec() [16:46] mardy: if you use aa_change_profile(), it should be called exactly before the call to exec() [16:46] mardy: otherwise, the profile that you're changing to will need to allow all of the things you do between the aa_change_profile() and the exec() since you've already changed into the new profile === Nexus is now known as Guest33786 [17:09] tyhicks: I have one unconfined process which spawns several child processes via QProcess [17:09] tyhicks: can I call aa_change_onexec() more than once, in that parent process? [17:12] tyhicks: or do I have to call aa_change_onexec() after fork()? [17:14] mardy: are they processes or threads? [17:14] (I assume processes from the name "QProcess" but I'd like to be sure) [17:15] tyhicks: processes [17:17] mardy: you'd probably want to call aa_change_onexec() after fork() [17:18] mardy: that way you don't have to worry about your parent process calling into a library that does who-knows-what and may end up spawning a process that's unexpectedly confined [17:19] mardy: I'd recommend something like this: fork() -> aa_change_onexec() -> do other process initialization stuff -> exec() [17:22] tyhicks: OK, thanks === thelionroars1337 is now known as thelionroars [19:08] whee splits === ev_ is now known as ev === sephiap_ is now known as sephiap === ken_ is now known as kenvandine [19:26] Hi :) === _salem is now known as salem_ === salem_ is now known as _salem