Comment 2 for bug 383177

Revision history for this message
Kees Cook (kees) wrote :

I would like to see 2 things before this gets approved:
 - an AppArmor profile that matches the functionality of the exist dhcp-client profile to confine this root process (see https://help.ubuntu.com/community/AppArmor#Creating%20a%20new%20profile ).
 - verifying that MTU is not set lower than 576, as we've had to fix with both network-manager and dhcp-client (see bug 352779).