[apparmor] Cache update broken

Christian Boltz apparmor at cboltz.de
Sat Aug 4 13:53:50 UTC 2012


Hello,

I received a bugreport that loading AppArmor needs 25 seconds at boot:
    https://bugzilla.novell.com/show_bug.cgi?id=774529
I can reproduce the problem on my system (AppArmor 2.8.0)

It looks like the cache is not updated, and (for obvious reasons) the 
outdated cache isn't used.

# grep '^[^#]' /etc/apparmor/parser.conf
write-cache
show-cache

# apparmor_parser -r /etc/apparmor.d/usr.lib.dovecot.deliver 
Cache read/write disabled: /sys/kernel/security/apparmor/features does 
not match /etc/apparmor.d/cache/.features
Cache miss: /etc/apparmor.d/usr.lib.dovecot.deliver

Expected behaviour IMHO: update the cache and the .features file.

Any idea what is wrong? (A patch would be even better ;-)


Regards,

Christian Boltz
-- 
"Wirklich praxisnah wären Münzen zu EUR 0,99."
[Wolfgang Schwanke in de.etc.sprache.deutsch]




More information about the AppArmor mailing list