Comment # 17 on bug 1120472 from
(In reply to Wnereiz Z from comment #15) 
> > To fix this, run the following at the end of the aa_autodep and aa_genprof
> > tests:
> >     echo '/usr/sbin/nscd {}' | apparmor_parser -R
> > to unload the "/usr/sbin/nscd" profile.
> > Expected result: no output, $? == 0
> 
> Thanks for the tips. I wasn't considered the loaded profile will implicate
> the profile generated in another profile directory by aa-genprof. I'm going
> to check.

Quick explanation:

Not unloading the profile (when deleting it on disk) didn't hurt as long as the
shipped profile was named "/usr/sbin/nscd" - that's exactly the name aa-genprof
and aa-autodep use. Therefore the deleted-on-disk profile was replaced with the
new profile, but the end result "/usr/sbin/nscd profile loaded" was the same.

With the named profiles ("nscd") we now have a different profile name, which
made the missing profile unload visible.


You are receiving this mail because: