[apparmor] [patch] Handle #include <directory> in is_known_rule()

Steve Beattie steve at nxnw.org
Tue Jul 7 21:38:55 UTC 2015


On Sat, Jul 04, 2015 at 06:58:39PM +0200, Christian Boltz wrote:
> this patch fixes the crash reported in
> https://bugs.launchpad.net/apparmor/+bug/1471425
> and also avoids asking for and adding superfluous rules that are
> already covered by a file in the included directory.
> 
> This patch looks bigger than it is because it moves quite some lines
> into the "else:" branch. Everything inside the "else:" just got an
> additional whitespace level.
> 
> Note: 2.9 needs a different patch because it has some profile_known_*()
> functions instead of is_known_rule().
> 
> [ 61-is_known_rule-check-directory-includes.diff ]

I couldn't reproduce the failure against trunk, but the patch looks
fine. Acked-by: Steve Beattie <steve at nxnw.org>.

-- 
Steve Beattie
<sbeattie at ubuntu.com>
http://NxNW.org/~steve/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20150707/49678893/attachment.pgp>


More information about the AppArmor mailing list