[apparmor] [PATCH] reset match flags state

John Johansen john.johansen at canonical.com
Mon Dec 10 23:11:43 UTC 2012


On 12/10/2012 02:49 PM, Steve Beattie wrote:
> On Sun, Dec 09, 2012 at 02:01:56AM -0800, John Johansen wrote:
>> Note: this should not result in profiles with the wrong x transitions loaded
>> as it causes compilation to file with an x conflict.
> 
> Based on the example profile you showed me that triggered the failure, I
> generated a reproducer testcase for this.
> 
nice, thanks steve

Acked-by: John Johansen <john.johansen at canonical.com>

> === added file 'parser/tst/simple_tests/xtrans/x-conflict2.sd'
> --- parser/tst/simple_tests/xtrans/x-conflict2.sd	1970-01-01 00:00:00 +0000
> +++ parser/tst/simple_tests/xtrans/x-conflict2.sd	2012-12-10 22:45:49 +0000
> @@ -0,0 +1,39 @@
> +#
> +#=DESCRIPTION test for reused flag state
> +#=EXRESULT PASS
> +#
> +
> +/usr/bin/parent-profile {
> +
> +  /usr/bin/profile1 Cx -> profile1,
> +  /usr/bin/profile2 Cx -> profile2,
> +  /usr/bin/profile3 Cx -> profile3,
> +  /usr/bin/profile4 Cx -> profile4,
> +  /usr/bin/profile5 Cx -> profile5,
> +  /usr/bin/profile6 Cx -> profile6,
> +
> +  profile profile1 {
> +
> +  }
> +
> +  profile profile2 {
> +
> +  }
> +
> +  profile profile3 {
> +
> +  }
> +
> +  profile profile4 {
> +    /usr/bin/apt-get Ux,
> +    /usr/bin/dpkg Ux,
> +  }
> +
> +  profile profile5 {
> +
> +  }
> +
> +  profile profile6 {
> +
> +  }
> +}
> 
> 
> 
> 




More information about the AppArmor mailing list