Hello, the capnames list missed a comma, which lead to the funny "mac_overridesyslog" capability name.
__debug_capabilities() seems to be the only user of capnames, which might explain why this bug wasn't noticed earlier. I propose this patch for trunk, 2.10 and 2.9. BTW: Do we really need capnames or could the code be changed to use the list from cap_names.h? [ parser-fix-missing-comma.diff ] === modified file 'parser/parser_misc.c' --- parser/parser_misc.c 2015-07-11 01:16:09 +0000 +++ parser/parser_misc.c 2016-01-15 12:15:53 +0000 @@ -724,7 +724,7 @@ "audit_write", "audit_control", "setfcap", - "mac_override" + "mac_override", "syslog", }; Regards, Christian Boltz -- Durr, shouldn't send emails before having my morning coffee. [Steve Beattie in apparmor]
signature.asc
Description: This is a digitally signed message part.
-- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor