Re: [apparmor] WTF changed in latest aa-enforce?!

2014-08-14 Thread Christian Boltz
Hello, Am Donnerstag, 14. August 2014 schrieb Aaron Lewis: > 1. A comma is needed even if it's the last line before the ending '}' > -- That's a change I never tested a profile without a comma in the last rule, so I don't know if it was ever optional ;-) > 2. The error message does not show

Re: [apparmor] WTF changed in latest aa-enforce?!

2014-08-14 Thread Christian Boltz
Hello, Am Mittwoch, 13. August 2014 schrieb Seth Arnold: > On Wed, Aug 13, 2014 at 01:54:30PM +0200, Christian Boltz wrote: > > > apparmor.common.AppArmorException: "Syntax Error: Missing '}' . > > > Reached end of file /etc/apparmor.d/usr.sbin.nginx while inside > > > profile /usr/sbin/nginx" >

Re: [apparmor] WTF changed in latest aa-enforce?!

2014-08-13 Thread Seth Arnold
On Thu, Aug 14, 2014 at 08:30:29AM +0800, Aaron Lewis wrote: > Okay, Thanks Seth. So > > 1. A comma is needed even if it's the last line before the ending '}' > -- That's a change The trailing comma on every rule has been part of AppArmor since I started working on it back in 2000. It's one o

Re: [apparmor] WTF changed in latest aa-enforce?!

2014-08-13 Thread Aaron Lewis
Okay, Thanks Seth. So 1. A comma is needed even if it's the last line before the ending '}' -- That's a change 2. The error message does not show which line has the syntax error -- All I see is a stack trace, a python one, no line-number of the parsed rule file Am I wrong? On Thu, Aug 14,

Re: [apparmor] WTF changed in latest aa-enforce?!

2014-08-13 Thread Seth Arnold
On Wed, Aug 13, 2014 at 01:54:30PM +0200, Christian Boltz wrote: > > apparmor.common.AppArmorException: "Syntax Error: Missing '}' . > > Reached end of file /etc/apparmor.d/usr.sbin.nginx while inside > > profile /usr/sbin/nginx" > > The error message is misleading - you have a syntax error in th

Re: [apparmor] WTF changed in latest aa-enforce?!

2014-08-13 Thread Christian Boltz
Hello, Am Mittwoch, 13. August 2014 schrieb Aaron Lewis: > I just upgraded to Ubuntu 14.04 and every profile I write is invalid > now, WTF? Did you guys complete rewritten all script with python? > That's really FUNNY > > apparmor.common.AppArmorException: "Syntax Error: Missing '}' . > Reached e

Re: [apparmor] WTF changed in latest aa-enforce?!

2014-08-13 Thread Aaron Lewis
Hi Seth, Thanks for reply. So, is this invalid now? /var/lib/nginx/fastcgi/{**,} mrw, I need to grant permission both to /var/lib/nginx/fastcgi/ and everything in it. Does /var/lib/nginx/fastcgi/** imply them both? On Wed, Aug 13, 2014 at 2:04 PM, Seth Arnold wrote: > On Wed, Aug 13, 2014

Re: [apparmor] WTF changed in latest aa-enforce?!

2014-08-12 Thread Seth Arnold
On Wed, Aug 13, 2014 at 12:51:18PM +0800, Aaron Lewis wrote: > I just upgraded to Ubuntu 14.04 and every profile I write is invalid now, WTF? > Did you guys complete rewritten all script with python? That's really FUNNY I'm sorry this failed you. Our Perl-based utilities were more fragile than th

Re: [apparmor] WTF changed in latest aa-enforce?!

2014-08-12 Thread Aaron Lewis
Alright I just saved my application server. Please, TEST your syntax parser before you complete REWRITTEN everything, are you trying to remove the "/path/{,**} rw" syntax? On Wed, Aug 13, 2014 at 12:51 PM, Aaron Lewis wrote: > I just upgraded to Ubuntu 14.04 and every profile I write is invalid

[apparmor] WTF changed in latest aa-enforce?!

2014-08-12 Thread Aaron Lewis
I just upgraded to Ubuntu 14.04 and every profile I write is invalid now, WTF? Did you guys complete rewritten all script with python? That's really FUNNY apparmor.common.AppArmorException: "Syntax Error: Missing '}' . Reached end of file /etc/apparmor.d/usr.sbin.nginx while inside profile /usr/s