Hello, Am Mittwoch, 15. April 2015 schrieb Steve Beattie: > FYI, even with this patch and patch 33 applied, the tools will still > crash when parsing a profile that extends an existing variable that's > defined in an include file (like something under tunables/) like so: > > # Last Modified: Wed Apr 15 10:06:49 2015 > #include <tunables/global> > > @{MY_BINS}=/bin/false > @{MY_BINS}+=/bin/true > @{HOMEDIRS}+=/data/home > > /home/ubuntu/tmp/hello_world.sh { > ...
> apparmor.common.AppArmorException: u'Values added to a non-existing > variable @{HOMEDIRS}: /data/home in > /etc/apparmor.d/home.ubuntu.tmp.hello_world.sh' Sounds like https://bugs.launchpad.net/apparmor/+bug/1331856 - which has a patch attached, but I have to admit that I didn't test it yet. Also, I'm not sure if it is the way to go - I tend to prefer to store variables as var_set (=) and var_add (+=) so that we don't need to re- parse the includes for each profile. Nevertheless the patch is probably a good starting point. Regards, Christian Boltz -- > This will be the Chinese year of the Snake so the next release should > be called Anaconda. Period. No discussion, no arguments. Using a name of South America species because there is a Year of Snake in China? This is what people called "globalization", isn't it ;-) [> Basil Chupin and Michal Vyskocil in opensuse-factory] -- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor