[Bug 426159] New: "deny" rules enforced even if profile is in complain mode
https://bugzilla.novell.com/show_bug.cgi?id=426159
Summary: "deny" rules enforced even if profile is in complain
mode
Product: openSUSE 11.0
Version: Final
Platform: Other
OS/Version: Other
Status: NEW
Severity: Critical
Priority: P5 - None
Component: AppArmor
AssignedTo: jjohansen@novell.com
ReportedBy: suse-beta@cboltz.de
QAContact: qa@suse.de
Found By: ---
I just learned the hard way that "deny" rules are enforced even if a profile is
in complain mode.
Reproducer:
root@cboltz:~> cat /etc/apparmor.d/tmp.testscript
# Last Modified: Sun Sep 14 15:17:11 2008
#include
https://bugzilla.novell.com/show_bug.cgi?id=426159
User jjohansen@novell.com added comment
https://bugzilla.novell.com/show_bug.cgi?id=426159#c1
John Johansen
https://bugzilla.novell.com/show_bug.cgi?id=426159
User suse-beta@cboltz.de added comment
https://bugzilla.novell.com/show_bug.cgi?id=426159#c2
Christian Boltz
https://bugzilla.novell.com/show_bug.cgi?id=426159
User jeffm@novell.com added comment
https://bugzilla.novell.com/show_bug.cgi?id=426159#c4
Jeff Mahoney
https://bugzilla.novell.com/show_bug.cgi?id=426159
User suse-beta@cboltz.de added comment
https://bugzilla.novell.com/show_bug.cgi?id=426159#c5
--- Comment #5 from Christian Boltz
A fix for this was committed to the SLE11 branch. I've added it to the SL111_BRANCH. Closing as fixed.
Sounds good, but what exactly does this mean for openSUSE 11.1? a) the fix is in 11.1 goldmaster? b) the fix comes with the next kernel update for 11.1? c) ....? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=426159
User jeffm@novell.com added comment
https://bugzilla.novell.com/show_bug.cgi?id=426159#c6
--- Comment #6 from Jeff Mahoney
https://bugzilla.novell.com/show_bug.cgi?id=426159
User swamp@suse.com added comment
https://bugzilla.novell.com/show_bug.cgi?id=426159#c7
Swamp Script User
https://bugzilla.novell.com/show_bug.cgi?id=426159
User suse-beta@cboltz.de added comment
https://bugzilla.novell.com/show_bug.cgi?id=426159#c8
Christian Boltz
participants (1)
-
bugzilla_noreply@novell.com