** This bug is no longer a duplicate of bug 1522938
unix rules not written to profile
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1528778
Title:
aa-logprof doesn't
*** This bug is a duplicate of bug 1522938 ***
https://bugs.launchpad.net/bugs/1522938
** This bug has been marked a duplicate of bug 1522938
unix rules not written to profile
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is
*** This bug is a duplicate of bug 1522938 ***
https://bugs.launchpad.net/bugs/1522938
** Changed in: apparmor (Ubuntu)
Importance: Undecided => Wishlist
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in
Well, maybe things are even more interesting:
- the log message doesn't specify the len, so a socket name ending with \0
_will_ cause trouble
- for some reason, the log line above gets parsed as AA_RECORD_INVALID:
START
File: testcase_syslog_unix_01.in
Event type: AA_RECORD_INVALID
Audit ID:
The zeros are probably intentional; the name of abstract unix sockets
allows ascii NULs, and they may or may not be relevant based on the
address length as reported in the C APIs. It's a terrible interface all
around.. (and now that I just now realize that a unix socket with name
@00...00 len=2 is
Yup, aa-logprof doesn't recognize unix rules and events. If I add
manually this rules, after next aa-logprof running and answering
questions, all added unix rules are deleted from profile files.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages,
Loosing unix rules is already fixed in bzr (trunk r3310, 2.10 branch
r3292, 2.9 branch r2981) since a week, see bug 1522938.
BTW: Given how many issues you find, maybe you should switch to bzr
trunk? ;-)
** Also affects: apparmor
Importance: Undecided
Status: New
** Tags added:
I will :)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1528778
Title:
aa-logprof doesn't support unix rules/events
Status in AppArmor:
New
Status in apparmor
8 matches
Mail list logo