http://bugzilla.opensuse.org/show_bug.cgi?id=1120472
http://bugzilla.opensuse.org/show_bug.cgi?id=1120472#c17
--- Comment #17 from Christian Boltz
To fix this, run the following at the end of the aa_autodep and aa_genprof tests: echo '/usr/sbin/nscd {}' | apparmor_parser -R to unload the "/usr/sbin/nscd" profile. Expected result: no output, $? == 0
Thanks for the tips. I wasn't considered the loaded profile will implicate the profile generated in another profile directory by aa-genprof. I'm going to check.
Quick explanation: Not unloading the profile (when deleting it on disk) didn't hurt as long as the shipped profile was named "/usr/sbin/nscd" - that's exactly the name aa-genprof and aa-autodep use. Therefore the deleted-on-disk profile was replaced with the new profile, but the end result "/usr/sbin/nscd profile loaded" was the same. With the named profiles ("nscd") we now have a different profile name, which made the missing profile unload visible. -- You are receiving this mail because: You are on the CC list for the bug.