[apparmor] [PATCH 2/3] Fix protocol error when loading policy to kernels without compat patches

John Johansen john.johansen at canonical.com
Wed Apr 11 20:53:41 UTC 2012


http://bugs.launchpad.net/bugs/968956

The parser is incorrectly generating network rules for kernels that can
not support them.  This occurs on kernels with the new features directory
but not the compatibility patches applied.

Signed-off-by: John Johansen <john.johansen at canonical.com>
---
 parser/parser_main.c |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/parser/parser_main.c b/parser/parser_main.c
index fcb8554..f57cfb1 100644
--- a/parser/parser_main.c
+++ b/parser/parser_main.c
@@ -801,6 +801,8 @@ static void get_match_string(void) {
 		handle_features_dir(FLAGS_FILE, &flags_string, FLAGS_STRING_SIZE, flags_string);
 		if (strstr(flags_string, "network"))
 			kernel_supports_network = 1;
+		else
+			kernel_supports_network = 0;
 		if (strstr(flags_string, "mount"))
 			kernel_supports_mount = 1;
 		return;
-- 
1.7.9.1




More information about the AppArmor mailing list