Hello,
Am Mittwoch, 15. April 2015 schrieb Steve Beattie:
> FYI, even with this patch and patch 33 applied, the tools will still
> crash when parsing a profile that extends an existing variable that's
> defined in an include file (like something under tunables/) like so:
>
> # Last Modified: Wed Apr 15 10:06:49 2015
> #include <tunables/global>
>
> @{MY_BINS}=/bin/false
> @{MY_BINS}+=/bin/true
> @{HOMEDIRS}+=/data/home
>
> /home/ubuntu/tmp/hello_world.sh {
> ...
> apparmor.common.AppArmorException: u'Values added to a non-existing
> variable @{HOMEDIRS}: /data/home in
> /etc/apparmor.d/home.ubuntu.tmp.hello_world.sh'
Sounds like https://bugs.launchpad.net/apparmor/+bug/1331856 - which has
a patch attached, but I have to admit that I didn't test it yet.
Also, I'm not sure if it is the way to go - I tend to prefer to store
variables as var_set (=) and var_add (+=) so that we don't need to re-
parse the includes for each profile. Nevertheless the patch is probably
a good starting point.
Regards,
Christian Boltz
--
> This will be the Chinese year of the Snake so the next release should
> be called Anaconda. Period. No discussion, no arguments.
Using a name of South America species because there is a Year of Snake
in China? This is what people called "globalization", isn't it ;-)
[> Basil Chupin and Michal Vyskocil in opensuse-factory]
--
AppArmor mailing list
AppArmor@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/apparmor
