[apparmor] [PATCH] perl multiarch updates v2

intrigeri intrigeri at debian.org
Thu Aug 21 11:02:18 UTC 2014


Hi,

Jamie Strandboge wrote (20 Aug 2014 22:16:44 GMT) :
> Attached is a patch to update the perl abstraction, logprof.conf, severity.db
> and test for Debian/Ubuntu perl multiarch paths. This incorporates the feedback
> from intrigeri.

> -  /usr/lib{,32,64}/perl5/**         r,
> -  /usr/lib{,32,64}/perl{,5}/**.so*  mr,
> +  /usr/lib{,32,64}/perl5/**                    r,
> +  /usr/lib{,32,64}/perl{,5}/**.so*             mr,
> +  /usr/lib/@{multiarch}/perl/**                r,
> +  /usr/lib/@{multiarch}/perl{,5}/[0-9]*/**.so* mr,

It's better, in that it allows 'mr' on the compiled XS modules found
in /usr/lib/@{multiarch}/perl5/. But it doesn't seem to allow reading
the pure Perl modules that can be found in that directory as well:

  $ find /usr/lib/x86_64-linux-gnu/perl5 -name *.pm | wc -l
  1389

So I think that:

  /usr/lib/@{multiarch}/perl/**                r,

... should instead be:

  /usr/lib/@{multiarch}/perl{,5}/**            r,

Just my 2cts, sorry if I missed something :)

Cheers,
-- 
intrigeri



More information about the AppArmor mailing list