I just noticed a corrupted message on up to date Hardy, which trips up
aa-genprof:
Mar 11 08:32:36 myhost kernel: [1579298.005506] audit(1236778356.334:171932):
type=1502 operation="file_mmap" requested_mask="::r" denied_mask="::r"
name="/bin/echo" pid=25777 profile="null-complain-profile" namespace="default"
Mar 11 08:32:36 myhost kernel: [1579298.005529] audit(1236778356.334:171933):
type=1502 operation="file_mmap" requested_mask="::mr"
denied_mask="::mrme="/bin/echo" pid=25778 profile="null-complain-profile"
namespace="default"
Mar 11 08:32:36 myhost kernel: [1579298.010021] audit(1236778356.344:171977):
type=1502 operation="file_mmap" requested_mask="::mr" denied_mask="::mr"
name="/bin/echo" pid=25778 profile="null-complain-profile" namespace="default"
Notice the 2nd messge, it has:
...denied_mask="::mrme="/bin/echo"...
I was investigating bug #340183 using the test case there. It may be
some sort of race condition as I could not reproduce in a kvm Hardy
guest VM, but can quite easily on my x86_64 server (with the -server
kernel).
Marking Confirmed.
** Changed in: apparmor (Ubuntu)
Status: New => Confirmed
** Changed in: apparmor (Ubuntu Hardy)
Status: New => Confirmed
** Changed in: apparmor (Ubuntu Jaunty)
Status: Confirmed => New
--
Corrupted AppArmor audit log messages
https://bugs.launchpad.net/bugs/160238
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
