[apparmor] [PATCH 4/8] Remove testing for AARE as it is the only matching engine

Steve Beattie steve at nxnw.org
Thu Sep 12 23:08:52 UTC 2013


On Wed, Sep 11, 2013 at 01:47:43AM -0700, Tyler Hicks wrote:
> From: John Johansen <john.johansen at canonical.com>
> 
> Remove use of AARE_DFA as the alternate pcre matching engine was removed
> years ago.

I haven't figured out what's going wrong, but this patch breaks profile
loading around hats:

$ cat /tmp/sdtest.24517-4609-fPslqn/profile
/home/ubuntu/bzr/apparmor/tests/regression/apparmor/syscall_ptrace {

  ^sub {
    /proc/*/attr/current w,
  }
}

$ cat /tmp/sdtest.24517-4609-fPslqn/profile.no_hat
/home/ubuntu/bzr/apparmor/tests/regression/apparmor/syscall_ptrace {

}

$ sudo ../../../parser/apparmor_parser /tmp/sdtest.24517-4609-fPslqn/profile
../../../parser/apparmor_parser: Unable to add "sub".  Profile doesn't exist

$ sudo ../../../parser/apparmor_parser -r  /tmp/sdtest.24517-4609-fPslqn/profile
../../../parser/apparmor_parser: Unable to replace "sub".  Profile doesn't exist

$ sudo ../../../parser/apparmor_parser /tmp/sdtest.24517-4609-fPslqn/profile.no_hat

$ sudo ../../../parser/apparmor_parser -r /tmp/sdtest.24517-4609-fPslqn/profile
../../../parser/apparmor_parser: Unable to replace "/home/ubuntu/bzr/apparmor/tests/regression/apparmor/syscall_ptrace".  Profile doesn't conform to protocol

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20130912/6f5464e4/attachment.pgp>


More information about the AppArmor mailing list