[apparmor] Using @{multiarch} in profile name

Cameron Norman camerontnorman at gmail.com
Mon Jun 8 00:25:46 UTC 2015


Hello,

I recently hit an issue where I wanted a profile that matched

/usr/lib/@{multiarch}/bamf/bamfdaemon

When I tried to use that as the profile name the parser spit this out:

apparmor_parser: Regex grouping error: Invalid number of items between {}
apparmor_parser: Unable to parse input line
'/usr/lib/@{multiarch}/bamf/bamfdaemon'
apparmor_parser: Invalid profile name
'/usr/lib/@{multiarch}/bamf/bamfdaemon' - bad regular expression
ERROR processing regexs for profile
/usr/lib/@{multiarch}/bamf/bamfdaemon, failed to load

Is this supposed to be supported? I do have tunables/global included
before this profile definition, btw.

Thank you,
--
Cameron Norman



More information about the AppArmor mailing list