aa-cleanprof reports error attempting to write file

[Steve Beattie]

ubuntu@vivid-amd64:~/bzr/apparmor/utils$ PYTHONPATH=$PWD ./aa-cleanprof -d ~/tmp/aa-test/ /bin/true

Deleted 0 rules.

= Changed Local Profiles =

The local profile for /bin/true in file /home/ubuntu/tmp/aa-test/bin.true was changed. Would you like to save it?

(S)ave Changes / [(V)iew Changes] / Abo(r)t
--- /home/ubuntu/tmp/aa-test/bin.true 2015-04-13 13:16:53.390503033 -0700
+++ /tmp/tmpJQ46n7 2015-04-13 13:17:00.386502728 -0700
@@ -1,12 +1,11 @@
-# Last Modified: Mon Apr 13 11:43:20 2015
 #include <tunables/global>

 /bin/true {
   #include <abstractions/base>
- audit /bin/true ix,

   capability setuid,
- /bin/true ix,
   capability setuid,

+ /bin/true ix,
+
 }

= Changed Local Profiles =

The local profile for /bin/true in file /home/ubuntu/tmp/aa-test/bin.true was changed. Would you like to save it?

(S)ave Changes / [(V)iew Changes] / Abo(r)t
Writing updated profile for /bin/true.
cat: write error: Broken pipe

Notice the "cat: write error: Broken pipe" at the end.

[Steve Beattie (sbeattie)]

Oh, sorry, this the result of aa-cleanprof trying to reload the profile after modifying it, but not running as root. I think there might be a duplicate bug report about this.

[Christian Boltz (cboltz)]

Just to avoid any confusion - for the lost audit keyword, there is bug 1443642.

This bug is about the "cat: write error: Broken pipe" - that's caused by not running as root, which lets the pipe to apparmor_parser fail. Besides the non-informative error message, this is also worth a "useless use of cat" award ;-)