[apparmor] [patch] several updates for profiles/extras

Steve Beattie steve at nxnw.org
Mon Apr 11 23:02:47 UTC 2011


On Tue, Apr 12, 2011 at 12:52:55AM +0200, Christian Boltz wrote:
> Am Montag, 11. April 2011 schrieb Kees Cook:
> > On Mon, Apr 11, 2011 at 12:01:33PM +0200, Christian Boltz wrote:
> > > === modified file 'profiles/apparmor/profiles/extras/usr.bin.man'
> 
> > > +  /usr/bin/man r,
> > 
> > I still don't understand the need for this, but I won't NACK it.
> 
> I'll try without it...

Are you running man from another confined application? I seem to
recall seeing differing behavior towards access on a binary depending
on whether it was being exec()ed from an unconfined process versus
a confined one (i.e. Px transition).

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20110411/2b54e774/attachment.pgp>


More information about the AppArmor mailing list