[apparmor] [PATCH 2/5] Fix the changehat_wrapper regression test

[Kees Cook]

On Mon, Mar 26, 2012 at 06:03:54AM -0700, John Johansen wrote:
> The capabilities tests where failing in the changehat_wrapper test.  This was because
> they could not the changehat_wrapper sub executable, which trying to exec a binary
> in the tmpdir.
> 
> Specifically if the test was for syscall_ptrace.  It would generate a profile with
> a hat for ^syscall_ptrace and attempt to execute ./syscall_ptrace.  However this
> was failing in some situations, including when trying to debug from the tmpdir,
> as the syscall_XXX binary is no longer local.
> 
> Instead use the fully qualified path for the hat name, and the exec path.
> 
> Signed-off-by: John Johansen <john.johansen at canonical.com>

Acked-by: Kees Cook <kees at ubuntu.com>

-- 
Kees Cook