Kees Cook skrev:
> Hi! Thanks for the report. Did you have the "apparmor" package
> installed prior to building/installing the AA module?
I am pretty sure I did.
> There should be
> an "rmmod" in the apparmor postinst, and a module alias installed that
> loads the apparmor module instead of the capabilities module.
>
There is an rmmod in the postinst of the module - and this helps the
user start up apparmor right after installing the module. But as far as
I can tell there is no setting of alias in any of the apparmor files so
after booting apparmor is broken.
Hi,
Kees Cook skrev:
> Hi! Thanks for the report. Did you have the "apparmor" package
> installed prior to building/installing the AA module?
I am pretty sure I did.
> There should be
> an "rmmod" in the apparmor postinst, and a module alias installed that
> loads the apparmor module instead of the capabilities module.
>
There is an rmmod in the postinst of the module - and this helps the
user start up apparmor right after installing the module. But as far as
I can tell there is no setting of alias in any of the apparmor files so
after booting apparmor is broken.
root@thimk: /var/lib/ dpkg/info# grep alias apparmor*.postinst /var/lib/ dpkg/info# /var/lib/ dpkg/info# grep capa apparmor*.postinst modules- 2.6.20- 15-generic. postinst: rmmod capability
root@thimk:
root@thimk:
apparmor-
2>/dev/null || true
Per.