[apparmor] [Bug 1014304] Re: genprof misses some permissions
Christian Boltz
1014304 at bugs.launchpad.net
Sun Jun 17 13:57:55 UTC 2012
** Attachment added: "audit.log"
https://bugs.launchpad.net/apparmor/+bug/1014304/+attachment/3193611/+files/audit.log
--
You received this bug notification because you are a member of AppArmor
Developers, which is the registrant for AppArmor.
https://bugs.launchpad.net/bugs/1014304
Title:
genprof misses some permissions
Status in AppArmor Linux application security framework:
New
Bug description:
Take this little demo script:
#!/bin/bash
echo "Hello World!" > /tmp/hello.txt
cat /tmp/hello.txt
rm /tmp/hello.txt
I created a profile for it using genprof. Most important point: select
"child" for executing /bin/rm, see attached screendump.txt for
details.
When I run logprof after the genprof run, it proposes
Profile: /home/cb/linuxtag/apparmor/scripts/hello
Path: /usr/bin/rm
Old Mode: Cx
New Mode: rCx
That's something genprof should have catched...
To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1014304/+subscriptions
More information about the AppArmor
mailing list