[apparmor] [Bug 731184] Re: apparmor_parser fails to consider its own time stamp when determining if profile cache is stale

[Kees Cook]

The Ubuntu packaging for the parser already does this.

For a more air-tight solution, the parser version should likely be
included in the future cache metadata.

-- 
You received this bug notification because you are a member of AppArmor
Developers, which is the registrant for AppArmor.
https://bugs.launchpad.net/bugs/731184

Title:
  apparmor_parser fails to consider its own time stamp when determining
  if profile cache is stale

Status in AppArmor Linux application security framework:
  New

Bug description:
  If the apparmor_parser is updated (outside of current packaging), when
  doing profile loads it will use the existing cache of compiled
  profiles, instead of forcing a recompile on profiles.

  This can cause apparmor to load bad policy if the parser contains a
  bug fix for the previous version of the parser.

  This can be worked around in packaging by invalidating the cache and
  forcing a profile reload when the parser is upgraded.