[apparmor] debugging aa_change_profile

Jeroen Ooms jeroen.ooms at stat.ucla.edu
Fri Apr 27 07:16:11 UTC 2012


Hi Steve,

> As John said, aa_change_hat() merely requires the same value to
> be passed in, not a pointer to the same memory location. Looking
> at the git tree, you're once again hitting a type mis-match:
> aa_change_hat_wrapper() and aa_revert_hat_wrapper() take a pointer
> to an unsigned long (unsigned long*) as argument but then pass that
> _pointer_ when calling aa_change_hat().

Thanks a lot for catching this. By now it should be obvious that my
experience with C is close to your experience with R. The pointers are
still confusing me. I am used to programming in Java/Javascript where
everything is a reference, or in R where everything is a value (no
references at all). Either way, once my Ubuntu upgrade is done (only 3
hours remaining) I am going to apply your patch and see if I can get
things to work.

> For your test profile, I added the following audit qualifiers so that I
> knew when things were getting rejected:

Ah cool I wasn't aware of this feature. Prefixing a line with audit
will do some additional logging?

> but it worked to manually copy+waste the commands from it. Cluesticks
> welcome.

That is actually how people generally use R. It is meant as an
interactive console. Statistics is very much a trial and error
practice :-)



More information about the AppArmor mailing list