Matching of named profile fails when attachment doesn't contain globbing
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
AppArmor |
Fix Released
|
Undecided
|
Unassigned | ||
2.6 |
Fix Released
|
High
|
Unassigned |
Bug Description
Profiles that specify a name and attachment specification fail to attach when the attachment specification doesn't contain globbing.
eg.
# profile name and attachment the same - attaches as expected
profile /usr/lib/
# profile without attachment specification - does not attach as expected
profile chromium-browser
# profile with name and attachment specification where the attachment specification uses globbing - attaches as expected
profile chromium-browser /usr/lib/
# profile with name and attachment specification without globbing - FAILS to attach when it should
profile chromium-browser /usr/lib/
The attachment of the profile can be seen using aa-status or ps -Zu <userid>
Related branches
Changed in apparmor: | |
status: | New → Fix Released |
AppArmor 2.6.1 was released.