AF_TIPC not supported by parser when it is in the kernel
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
AppArmor |
Fix Released
|
Undecided
|
Unassigned | ||
2.6 |
Fix Released
|
Medium
|
Unassigned |
Bug Description
If in python I do something like:
s = socket.
I see this in the audit log:
type=AVC msg=audit(
If I then try to add rules for this in my profile:
network tipc,
network rdm,
I get:
$ sudo apparmor_parser -r -T -W /etc/apparmor.
AppArmor parser error for /etc/apparmor.
Leaving out the 'network tipc,' rule, but leaving 'rdm', the parser is ok, but I still get denials:
type=AVC msg=audit(
FYI, this also fails: socket( socket. AF_TIPC, socket. SOCK_SEQPACKET, 0)
s = socket.