[apparmor] [PATCH] reset match flags state
John Johansen
john.johansen at canonical.com
Mon Dec 10 23:11:43 UTC 2012
On 12/10/2012 02:49 PM, Steve Beattie wrote:
> On Sun, Dec 09, 2012 at 02:01:56AM -0800, John Johansen wrote:
>> Note: this should not result in profiles with the wrong x transitions loaded
>> as it causes compilation to file with an x conflict.
>
> Based on the example profile you showed me that triggered the failure, I
> generated a reproducer testcase for this.
>
nice, thanks steve
Acked-by: John Johansen <john.johansen at canonical.com>
> === added file 'parser/tst/simple_tests/xtrans/x-conflict2.sd'
> --- parser/tst/simple_tests/xtrans/x-conflict2.sd 1970-01-01 00:00:00 +0000
> +++ parser/tst/simple_tests/xtrans/x-conflict2.sd 2012-12-10 22:45:49 +0000
> @@ -0,0 +1,39 @@
> +#
> +#=DESCRIPTION test for reused flag state
> +#=EXRESULT PASS
> +#
> +
> +/usr/bin/parent-profile {
> +
> + /usr/bin/profile1 Cx -> profile1,
> + /usr/bin/profile2 Cx -> profile2,
> + /usr/bin/profile3 Cx -> profile3,
> + /usr/bin/profile4 Cx -> profile4,
> + /usr/bin/profile5 Cx -> profile5,
> + /usr/bin/profile6 Cx -> profile6,
> +
> + profile profile1 {
> +
> + }
> +
> + profile profile2 {
> +
> + }
> +
> + profile profile3 {
> +
> + }
> +
> + profile profile4 {
> + /usr/bin/apt-get Ux,
> + /usr/bin/dpkg Ux,
> + }
> +
> + profile profile5 {
> +
> + }
> +
> + profile profile6 {
> +
> + }
> +}
>
>
>
>
More information about the AppArmor
mailing list