aa-logprof doesn't generate policy due to missing abstractions/apache2-common
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
apparmor (Ubuntu) |
Fix Released
|
Undecided
|
Jamie Strandboge | ||
Lucid |
Fix Released
|
Undecided
|
Marc Deslauriers | ||
Maverick |
Fix Released
|
Undecided
|
Jamie Strandboge | ||
Natty |
Fix Released
|
Undecided
|
Jamie Strandboge |
Bug Description
SRU Justification
1. impact of the bug is medium for stable releases since aa-logprof is rendered inoperable when apparmor-profiles is installed
2. This has been addressed in the development branch
3. Patch is in packaging and consists of shipping apache2-common in apparmor.
4. TEST CASE:
$ sudo apt-get remove --purge apparmor # only if downgraded first
$ sudo apt-get install apparmor apparmor-utils apparmor-profiles
$ sudo aa-logprof
Can't find include file abstractions/
A fixed package will not have the above error.
5. The regression potential of the patch is very low, as it only moves apache2-common to the apparmor package.
Initial Report:
Binary package hint: apparmor
aa-logprof doesn't generate (or modify) policies due to missing abstractions/
~# aa-logprof
Can't find include file abstractions/
~#
Audit messages are present in the log file:
~# grep audit /var/log/messages | tail -n 10
Mar 16 09:53:57 panopticon kernel: [ 2117.122866] type=1502 audit(126872963
Mar 16 09:53:57 panopticon kernel: [ 2117.122978] type=1502 audit(126872963
Mar 16 09:53:57 panopticon kernel: [ 2117.122989] type=1502 audit(126872963
Mar 16 09:54:28 panopticon kernel: [ 2147.329908] type=1502 audit(126872966
Mar 16 09:54:28 panopticon kernel: [ 2147.329916] type=1502 audit(126872966
Mar 16 09:54:28 panopticon kernel: [ 2147.329970] type=1502 audit(126872966
Mar 16 09:54:28 panopticon kernel: [ 2147.329987] type=1502 audit(126872966
Mar 16 09:54:28 panopticon kernel: [ 2147.330006] type=1502 audit(126872966
Mar 16 09:54:28 panopticon kernel: [ 2147.330021] type=1502 audit(126872966
Mar 16 09:54:28 panopticon kernel: [ 2147.330062] type=1502 audit(126872966
~# lsb_release -a
LSB Version: core-2.
Distributor ID: Ubuntu
Description: Ubuntu lucid (development branch)
Release: 10.04
Codename: lucid
~# dpkg -l |grep appar
ii apparmor 2.5-0ubuntu1 User-space parser utility for AppArmor
ii apparmor-profiles 2.5-0ubuntu1 Profiles for AppArmor Security policies
ii apparmor-utils 2.5-0ubuntu1 Utilities for controlling AppArmor
ii libapparmor-perl 2.5-0ubuntu1 AppArmor library Perl bindings
ii libapparmor1 2.5-0ubuntu1 changehat AppArmor library
Changed in apparmor (Ubuntu): | |
assignee: | nobody → Marc Deslauriers (mdeslaur) |
status: | New → Confirmed |
description: | updated |
tags: |
added: verification-donee removed: verification-needed |
tags: |
added: verification-done removed: verification-donee |
Changed in apparmor (Ubuntu Lucid): | |
status: | Fix Released → Fix Committed |
This bug was fixed in the package apparmor - 2.5-0ubuntu2
---------------
apparmor (2.5-0ubuntu2) lucid; urgency=low
[ Jamie Strandboge ] patches/ 0001-lp538561. patch: add 'k' to /var/lib/ samba/* *.tdb in
* debian/
the samba abstraction (LP: #538561)
[ Marc Deslauriers ] patches/ 0002-aalogprof- warnings. patch: get rid of warnings when {rules, control} : move apache2 abstractions into the base package patches/ 0003-fix- memleaks. patch: include a couple of leak
* debian/
aa-logprof is run.
* debian/
so we can put apache2 profiles into the -profiles package without
aa-logprof bailing out. (LP: #539441)
* debian/
patches from upstream.
-- Marc Deslauriers <email address hidden> Fri, 26 Mar 2010 11:39:18 -0400