[apparmor] [Bug 652674] Re: logprof doesn't handle log messages without denied or requested masks correctly

Ubuntu QA's Bug Bot bug-stats at murraytwins.com
Mon Sep 19 21:31:40 UTC 2011


** Tags added: testcase

-- 
You received this bug notification because you are a member of AppArmor
Developers, which is the registrant for AppArmor.
https://bugs.launchpad.net/bugs/652674

Title:
  logprof doesn't handle log messages without denied or requested masks
  correctly

Status in AppArmor Linux application security framework:
  Fix Released
Status in AppArmor 2.5 series:
  Fix Released
Status in “apparmor” package in Ubuntu:
  Fix Released
Status in “apparmor” source package in Lucid:
  Fix Released
Status in “apparmor” source package in Maverick:
  Fix Released
Status in “apparmor” source package in Natty:
  Fix Released

Bug description:
  SRU

  1. when loading, unloading and replacing policy, AppArmor leaves a
  message in kern.log. When aa-logprof encounters this, it will spew
  many confusing warning messages.

  2. The bug has not been addressed in the development branch (natty is
  not open yet)

  3. Patch is from r1440 of 2.5 branch (linked to this bug)

  4. TEST CASE:
  $ echo 'Oct 14 07:14:13 bug652674 kernel: [ 5.429706] type=1400 audit(1287058453.835:9): apparmor="STATUS" operation="profile_load" name="/usr/share/gdm/guest-session/Xsession" pid=1201 comm="apparmor_parser"' > /tmp/log
  $ sudo aa-logprof -f /tmp/log # may be prompted to enable the repository. Choose 'Ask later'

  5. The regression potential is considered low. The fix does not affect
  the boot or shutdown process.

  
  Binary package hint: apparmor

  When aa-logprof runs into log messages that don't have denied or
  requested masks, like the following status message, it ends up trying
  to perform a string operation on an undefined variable which causes
  warnings to be printed to the console.

      [    9.633452] type=1400 audit(1285899118.285:5):
  apparmor="STATUS" operation="profile_replace" name="/sbin/dhclient3"
  pid=912 comm="apparmor_parser"

  I'm attaching a patch to fix this.

  ProblemType: Bug
  DistroRelease: Ubuntu 10.10
  Package: apparmor 2.5.1~rc1-0ubuntu2
  ProcVersionSignature: Ubuntu 2.6.35-22.33-generic 2.6.35.4
  Uname: Linux 2.6.35-22-generic x86_64
  NonfreeKernelModules: nvidia
  Architecture: amd64
  Date: Thu Sep 30 21:16:25 2010
  InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Release Candidate amd64 (20100928)
  ProcEnviron:
   PATH=(custom, user)
   LANG=en_US.utf8
   SHELL=/bin/bash
  SourcePackage: apparmor

To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/652674/+subscriptions



More information about the AppArmor mailing list