Hello,

the capnames list missed a comma, which lead to the funny
"mac_overridesyslog" capability name.

__debug_capabilities() seems to be the only user of capnames, which
might explain why this bug wasn't noticed earlier.


I propose this patch for trunk, 2.10 and 2.9.


BTW: Do we really need capnames or could the code be changed to use the
list from cap_names.h?


[ parser-fix-missing-comma.diff ]

=== modified file 'parser/parser_misc.c'
--- parser/parser_misc.c        2015-07-11 01:16:09 +0000
+++ parser/parser_misc.c        2016-01-15 12:15:53 +0000
@@ -724,7 +724,7 @@
        "audit_write",
        "audit_control",
        "setfcap",
-       "mac_override"
+       "mac_override",
        "syslog",
 };
 



Regards,

Christian Boltz
-- 
Durr, shouldn't send emails before having my morning coffee.
[Steve Beattie in apparmor]

Attachment: signature.asc
Description: This is a digitally signed message part.

-- 
AppArmor mailing list
AppArmor@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to