[Bug 1091642] Re: apparmor parser fails due to matchflags not being reset

[Launchpad Bug Tracker]

This bug was fixed in the package apparmor - 2.8.0-0ubuntu9

---------------
apparmor (2.8.0-0ubuntu9) raring; urgency=low

  * debian/control: make libnotify-bin a Suggests rather than a Recommends
    since it is assumed to already be installed on the desktop and so server
    environments don't have to pull in a lot of X dependencies (LP: #1061879)

apparmor (2.8.0-0ubuntu8) raring; urgency=low

  [ Steve Beattie ]
  * 0024-lp1091642-parser-reset_matchflags.patch: prevent reuse of
    matchflags in parser dfa backend and add testcase demonstrating the
    problem (LP: #1091642)

  [ Jamie Strandboge ]
  * debian/debhelper/postinst-apparmor: quote all occurences of #PROFILE#.
 -- Jamie Strandboge <jamie at ubuntu.com>   Tue, 18 Dec 2012 10:47:50 -0600

** Changed in: apparmor (Ubuntu)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1091642

Title:
  apparmor parser fails due to matchflags not being reset

Status in “apparmor” package in Ubuntu:
  Fix Released

Bug description:
  The apparmor parser fails when parsing the following policy due to the
  matchflags in the dfa backend not being reset:

  /usr/bin/parent-profile {

    /usr/bin/profile1 Cx -> profile1,
    /usr/bin/profile2 Cx -> profile2,
    /usr/bin/profile3 Cx -> profile3,
    /usr/bin/profile4 Cx -> profile4,
    /usr/bin/profile5 Cx -> profile5,
    /usr/bin/profile6 Cx -> profile6,

    profile profile1 {
    }
    profile profile2 {
    }
    profile profile3 {
    }
    profile profile4 {
      /usr/bin/apt-get Ux,
      /usr/bin/dpkg Ux,
    }
    profile profile5 {
    }
    profile profile6 {
    }
  }

  like so:

    $ apparmor_parser -Q x-conflict2.sd
    profile has merged rule with conflicting x modifiers
    ERROR processing regexs for profile profile4, failed to load

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1091642/+subscriptions