[apparmor] [Bug 1014304] [NEW] genprof misses some permissions

[Christian Boltz]

Public bug reported:

Take this little demo script:

#!/bin/bash
echo "Hello World!" > /tmp/hello.txt
cat /tmp/hello.txt
rm /tmp/hello.txt

I created a profile for it using genprof. Most important point: select
"child" for executing /bin/rm, see attached screendump.txt for details.

When I run logprof after the genprof run, it proposes
    Profile:  /home/cb/linuxtag/apparmor/scripts/hello
    Path:     /usr/bin/rm
    Old Mode: Cx
    New Mode: rCx

That's something genprof should have catched...

** Affects: apparmor
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of AppArmor
Developers, which is the registrant for AppArmor.
https://bugs.launchpad.net/bugs/1014304

Title:
  genprof misses some permissions

Status in AppArmor Linux application security framework:
  New

Bug description:
  Take this little demo script:

  #!/bin/bash
  echo "Hello World!" > /tmp/hello.txt
  cat /tmp/hello.txt
  rm /tmp/hello.txt

  I created a profile for it using genprof. Most important point: select
  "child" for executing /bin/rm, see attached screendump.txt for
  details.

  When I run logprof after the genprof run, it proposes
      Profile:  /home/cb/linuxtag/apparmor/scripts/hello
      Path:     /usr/bin/rm
      Old Mode: Cx
      New Mode: rCx

  That's something genprof should have catched...

To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1014304/+subscriptions