[apparmor] [patch 3/4] fix autodep profile construction

Kees Cook kees at ubuntu.com
Tue Mar 27 23:59:40 UTC 2012


On Tue, Mar 27, 2012 at 12:24:53PM -0700, Steve Beattie wrote:
> This patch fixes a couple of issue with autodep:
> 
>   1) The initial profile construction had not been adjusted to include
>      the 'allow' or 'deny' hash prefixing the path elements. This
>      fixes it by eliminating the path portion entirely and pushing
>      the path based accesses to the later analysis section of code.
> 
>   2) the mode of the original binary was accidentally getting reset
>      to 0, when it was intended to initialize the audit field to 0.

Acked-by: Kees Cook <kees at ubuntu.com>

-- 
Kees Cook



More information about the AppArmor mailing list