[apparmor] [patch] handle_binfmt: resolve symlinks in library paths

[Christian Boltz]

Hello,

$subject.

This should happen rarely, but nevertheless it can happen - and since
AppArmor needs the symlink target in the profile, we have to resolve any
symlink.


[ 76-handle_binfmt-resolve-symlinks.diff ]

=== modified file ./utils/apparmor/aa.py
--- utils/apparmor/aa.py        2016-02-21 17:14:28.444520585 +0100
+++ utils/apparmor/aa.py        2016-02-21 16:06:41.744595751 +0100
@@ -386,6 +388,7 @@
     reqs = get_reqs(path)
     while reqs:
         library = reqs.pop()
+        library = get_full_path(library)  # resolve symlinks
         if not reqs_processed.get(library, False):
             if get_reqs(library):
                 reqs += get_reqs(library)
 


Regards,

Christian Boltz
-- 
The "Well" was referring to my role: as a product
manager, I am not even entitled to review the "validity
of implementation details", ... I sometime cannot resist
and do nevertheless, ...;-)
[Matthias G. Eckermann in opensuse-factory]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/apparmor/attachments/20160221/1c8e4c27/attachment.pgp>