[apparmor] [Bug 1014304] Re: genprof misses some permissions

Christian Boltz 1014304 at bugs.launchpad.net
Sun Jun 17 13:57:12 UTC 2012


** Attachment added: "screendump.txt of genprof and logprof"
   https://bugs.launchpad.net/bugs/1014304/+attachment/3193610/+files/screendump.txt

-- 
You received this bug notification because you are a member of AppArmor
Developers, which is the registrant for AppArmor.
https://bugs.launchpad.net/bugs/1014304

Title:
  genprof misses some permissions

Status in AppArmor Linux application security framework:
  New

Bug description:
  Take this little demo script:

  #!/bin/bash
  echo "Hello World!" > /tmp/hello.txt
  cat /tmp/hello.txt
  rm /tmp/hello.txt

  I created a profile for it using genprof. Most important point: select
  "child" for executing /bin/rm, see attached screendump.txt for
  details.

  When I run logprof after the genprof run, it proposes
      Profile:  /home/cb/linuxtag/apparmor/scripts/hello
      Path:     /usr/bin/rm
      Old Mode: Cx
      New Mode: rCx

  That's something genprof should have catched...

To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1014304/+subscriptions



More information about the AppArmor mailing list