[Bug 1091642] Re: apparmor parser fails due to matchflags not being reset

[Launchpad Bug Tracker]

** Branch linked: lp:ubuntu/raring-proposed/apparmor

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1091642

Title:
  apparmor parser fails due to matchflags not being reset

Status in “apparmor” package in Ubuntu:
  New

Bug description:
  The apparmor parser fails when parsing the following policy due to the
  matchflags in the dfa backend not being reset:

  /usr/bin/parent-profile {

    /usr/bin/profile1 Cx -> profile1,
    /usr/bin/profile2 Cx -> profile2,
    /usr/bin/profile3 Cx -> profile3,
    /usr/bin/profile4 Cx -> profile4,
    /usr/bin/profile5 Cx -> profile5,
    /usr/bin/profile6 Cx -> profile6,

    profile profile1 {
    }
    profile profile2 {
    }
    profile profile3 {
    }
    profile profile4 {
      /usr/bin/apt-get Ux,
      /usr/bin/dpkg Ux,
    }
    profile profile5 {
    }
    profile profile6 {
    }
  }

  like so:

    $ apparmor_parser -Q x-conflict2.sd
    profile has merged rule with conflicting x modifiers
    ERROR processing regexs for profile profile4, failed to load

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1091642/+subscriptions