[apparmor] "Helpful" error message ;-)

Christian Boltz apparmor at cboltz.de
Tue Feb 1 21:33:31 UTC 2011


Hello,

Am Montag, 31. Januar 2011 schrieb John Johansen:
> On 01/31/2011 02:24 PM, Christian Boltz wrote:
> > failed user merge 0x2d04b41 0x901
> > failed other merge 0x2d04b41 0x2404000

> The come from an exec qualifier conflict detected during dfa
> creation. In this case it a conflict between the rules
> 
> 	/foo/** px,
> 	/foo/* pix, # px with Fallback to ix
> 
> which have an overlap of /foo/*

Indeed, thas was the problem. Thanks for pointing it out!

> However we could do a simple improvement on the message so that it
> outputs that there have been conflicting overlapping execute
> permissions qualifiers.

Sounds like a *very* good idea ;-)


Regards,

Christian Boltz
-- 
ACK. Ich hab ne Weile in einer Newsgruppe die Mail 'invalid@'
verwendet. Und ich bekomme Spam, der mich als "Invalid" anredet...
[David Haller in suse-linux]



More information about the AppArmor mailing list