[apparmor] trouble with nested grandchild profiles

[apparmor at raf.org]

John Johansen wrote:

> It should work if you transform you Cx rule in the indexcgi_profile to a Px
> rule.
> 
> /usr/sbin/apache2 flags=(complain) {
>   /path/to/index.cgi rCx -> indexcgi_profile,
>   profile indexcgi_profile flags=(complain) {
>     #use Px to -> to grandchild so we can avoid parser broken Cx mapping for grandchildren
>     /usr/bin/mutt-org rPx -> /usr/sbin/apache2//indexcgi_profile//mutt_profile,
>   }
> }
> #external grandchild profile, must come after grand parent and parent are defined
> profile /usr/sbin/apache2//indexcgi_profile//mutt_profile flags=(complain) {
> }
> 
> should work for you.

It does work. Many thanks.

cheers,
raf