aa-logprof unusable with latest lxc templates

[Zgth]

aa-loprof fails on a Precice system with LXC installed:

user@ubuntu:~$ sudo aa-logprof

lxc/lxc-default contains syntax errors. Line [ capability,]

The only workaround I've discovered is removing everything related to LXC from /etc/apparmor.d/ or the entire LXC package.
The logs attached are taken from a fresh Precise Server installation on a VirtualBox virtual machine, but the bug can be reproduced on a virtual Precise Desktop as well, AFAIK.

[Matt Willsher (mawi)]

I'm running precise desktop i686 and get the exact same error.

[webrat (irc-webratz)]

same issue here (Ubuntu 12.04.1, 64bit)

[Tyler Hicks (tyhicks)]

A workaround was committed upstream:

http://bazaar.launchpad.net/~apparmor-dev/apparmor/master/revision/2159

It makes aa-logprof/aa-genprof ignore rules valid AppArmor rules that they do not yet support. While it is not the most ideal fix, it is probably appropriate to SRU so that those tools are no longer broken when LXC is installed.

[Jamie Strandboge (jdstrand)]

This was fixed in 2.8.0-0ubuntu25 on Ubuntu 13.10.

[Jamie Strandboge (jdstrand)]

To be clear, the workaround was implemented in 2.8.0-0ubuntu25 on Ubuntu 13.10.

[Tyler Hicks (tyhicks)]

An IRC discussion about the upstream workaround has me second guessing that patch. I'm looking at this a little more to determine if there's a better solution.

[sles (slesru)]

Hello!

is it possible to apply this workaround and release update for 12.04? :-)

Thank you!

[Steve Beattie (sbeattie)]

Apparmor 2.9.0 has been released; closing.