[apparmor] [PATCH] reset match flags state

[Steve Beattie]

On Sun, Dec 09, 2012 at 02:01:56AM -0800, John Johansen wrote:
> Note: this should not result in profiles with the wrong x transitions loaded
> as it causes compilation to file with an x conflict.

Based on the example profile you showed me that triggered the failure, I
generated a reproducer testcase for this.

=== added file 'parser/tst/simple_tests/xtrans/x-conflict2.sd'
--- parser/tst/simple_tests/xtrans/x-conflict2.sd	1970-01-01 00:00:00 +0000
+++ parser/tst/simple_tests/xtrans/x-conflict2.sd	2012-12-10 22:45:49 +0000
@@ -0,0 +1,39 @@
+#
+#=DESCRIPTION test for reused flag state
+#=EXRESULT PASS
+#
+
+/usr/bin/parent-profile {
+
+  /usr/bin/profile1 Cx -> profile1,
+  /usr/bin/profile2 Cx -> profile2,
+  /usr/bin/profile3 Cx -> profile3,
+  /usr/bin/profile4 Cx -> profile4,
+  /usr/bin/profile5 Cx -> profile5,
+  /usr/bin/profile6 Cx -> profile6,
+
+  profile profile1 {
+
+  }
+
+  profile profile2 {
+
+  }
+
+  profile profile3 {
+
+  }
+
+  profile profile4 {
+    /usr/bin/apt-get Ux,
+    /usr/bin/dpkg Ux,
+  }
+
+  profile profile5 {
+
+  }
+
+  profile profile6 {
+
+  }
+}


-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20121210/8e7fbfa3/attachment.pgp>