[Bug 1198531] New: AppArmor profile for zgrep is incomplete
http://bugzilla.opensuse.org/show_bug.cgi?id=1198531 Bug ID: 1198531 Summary: AppArmor profile for zgrep is incomplete Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor Assignee: suse-beta@cboltz.de Reporter: Stromeko@NexGo.DE QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Option processing in zgrep stopped working since the AppArmor profile does not allow /usr/bin/expr to be executed: ~> zgrep -ah . /dev/null /usr/bin/zgrep: line 69: /usr/bin/expr: Permission denied /usr/bin/zgrep: eval: line 70: unexpected EOF while looking for matching `'' /usr/bin/zgrep: eval: line 71: syntax error: unexpected end of file /usr/bin/zgrep: line 71: /usr/bin/expr: Permission denied /usr/bin/grep: .: Is a directory The following patch fixes the problem (after reloading the profile of course): --- /etc/apparmor.d/zgrep +++ #<buffer zgrep> @@ -20,6 +20,7 @@ /usr/bin/bash ix, /usr/bin/bzip2 Cx -> helper, /usr/bin/cat ix, + /usr/bin/expr ix, /usr/bin/grep Cx -> helper, /usr/bin/gzip Cx -> helper, /usr/bin/mktemp ix, -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1198531 http://bugzilla.opensuse.org/show_bug.cgi?id=1198531#c1 Christian Boltz <suse-beta@cboltz.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #1 from Christian Boltz <suse-beta@cboltz.de> --- Thanks for the report! Fix submitted to Tumbleweed in SR 970466, and upstream as https://gitlab.com/apparmor/apparmor/-/merge_requests/873 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1198531 http://bugzilla.opensuse.org/show_bug.cgi?id=1198531#c2 --- Comment #2 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1198531) was mentioned in https://build.opensuse.org/request/show/970466 Factory / apparmor -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com