[apparmor] [PATCH] add multiarch support to abstractions

Jamie Strandboge jamie at canonical.com
Thu Mar 17 14:28:19 UTC 2011


With the upload of 2.13-0ubuntu6, libc6 has changed some of its paths
based on DEB_HOST_MULTIARCH. Eg, on amd64:
$ cat /etc/ld.so.conf.d/x86_64-linux-gnu.conf
# Multiarch support
/lib/x86_64-linux-gnu
/usr/lib/x86_64-linux-gnu

and on i386:
$ cat /etc/ld.so.conf.d/i686-linux-gnu.conf
# Multiarch support
/lib/i386-linux-gnu
/usr/lib/i386-linux-gnu
/lib/i686-linux-gnu
/usr/lib/i686-linux-gnu

Paths should be added to the abstractions[1] to use:
/lib/*-linux-gnu/...
/usr/lib/*-linux-gnu/...

We could probably do something like this instead:
/lib/{i386,i686,x86_64}-linux-gnu/...
/usr/lib/{i386,i686,x86_64}-linux-gnu/...

but since there will be different archs on different distributions as
well as new archs, I'd prefer to leave the glob, which is already fairly
specific.

I went through all the abstraction that had '64' in them, but only base
and nameservice were updated this time. Also, these days /lib/tls/ isn't
used (it was part of libc6-i686, which is now a Provides of libc6), so I
didn't add paths for tls. It is believed as more packages are delivered
with multiarch support, we will have to adjust more abstractions. Until
we actually see what those paths are though, there isn't much more we
can do atm.

[1] https://launchpad.net/bugs/736870

-- 
Jamie Strandboge             | http://www.canonical.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: lp736870.patch
Type: text/x-patch
Size: 2329 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20110317/891f2476/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20110317/891f2476/attachment.pgp>


More information about the AppArmor mailing list