scopes denial against /android/system/build.prop
Bug #1378838 reported by
Jamie Strandboge
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
apparmor-easyprof-ubuntu (Ubuntu) |
Fix Released
|
High
|
Jamie Strandboge |
Bug Description
Saw the following denial when reviewing a syslog paste:
apparmor="DENIED" operation="open" profile="<profile>" name="/
We already have this rule:
/system/
Seems like it should be changed to:
/{,android/
Related branches
Changed in apparmor-easyprof-ubuntu (Ubuntu): | |
status: | In Progress → Fix Committed |
To post a comment you must log in.
This bug was fixed in the package apparmor- easyprof- ubuntu - 1.2.36
--------------- easyprof- ubuntu (1.2.36) utopic; urgency=medium
apparmor-
* ubuntu/accounts: allow all on org.freedesktop .DBus.Propertie s for google/ code/AccountsSS O/SingleSignOn/ ** (LP: #1378809) ubuntu- scope-local- content, ubuntu/webview: also system/ build.prop (LP: #1378838)
/com/
* ubuntu/ubuntu-*, pending/
allow read on /android/
-- Jamie Strandboge <email address hidden> Wed, 08 Oct 2014 08:28:17 -0500