aa-enforce doesn't remove complain flag in hats
Bug #1322780 reported by
Christian Boltz
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
AppArmor |
Fix Released
|
Medium
|
Unassigned | ||
2.9 |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
From https:/
$ aa-enforce /etc/apparmor.
$ ls /etc/apparmor.
0
$ grep complain /etc/apparmor.
^DEFAULT_URI flags=(complain) {
^HANDLING_
-> bug: complain not removed on hats when aa-enforce runs
aa-complain most probably shares this bug the other way round.
Bonus points for adding a commandline option to only switch the flag of the main profile or only a specific hat ;-)
tags: | added: aa-tools |
Changed in apparmor: | |
status: | New → Triaged |
importance: | Undecided → Medium |
To post a comment you must log in.
This also happens with the python utils.