Python tools don't understand 'unmount' directive

[Andrew Lewis]

If one has a rule like 'unmount,' anywhere in policy this will cause tools like aa-genprof and aa-enforce to throw errors:

Traceback (most recent call last):
  File "/usr/sbin/aa-enforce", line 30, in <module>
    tool.cmd_enforce()
  File "/usr/lib/python3/dist-packages/apparmor/tools.py", line 153, in cmd_enforce
    apparmor.read_profiles()
  File "/usr/lib/python3/dist-packages/apparmor/aa.py", line 2564, in read_profiles
    read_profile(profile_dir + '/' + file, True)
  File "/usr/lib/python3/dist-packages/apparmor/aa.py", line 2590, in read_profile
    profile_data = parse_profile_data(data, file, 0)
  File "/usr/lib/python3/dist-packages/apparmor/aa.py", line 3199, in parse_profile_data
    raise AppArmorException(_('Syntax Error: Unknown line found in file: %s line: %s') % (file, lineno + 1))
apparmor.common.AppArmorException: 'Syntax Error: Unknown line found in file: /etc/apparmor.d/usr.local.bin.foo line: 19'

[Tyler Hicks (tyhicks)]

Thanks for the bug report. I've sent a fix to the upstream AppArmor list for review:

https://lists.ubuntu.com/archives/apparmor/2014-June/005796.html

[Tyler Hicks (tyhicks)]

The fix has been pushed to lp:apparmor as revision 2520

[Steve Beattie (sbeattie)]

Apparmor 2.9.0 has been released; closing.