apparmor_parser complains about '.' and '"' in child profile names

Bug #1260090 reported by Jamie Strandboge
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
AppArmor
Triaged
Low
Unassigned
apparmor (Ubuntu)
Triaged
Low
Unassigned

Bug Description

The following fails to compile:
profile "com.ubuntu.developer.jdstrand.test-oxide_test-oxide_0.1" (attach_disconnected) {
  /usr/lib/@{multiarch}/oxide-qt/chrome-sandbox cx -> chrome_sandbox,
  /usr/lib/@{multiarch}/oxide-qt/oxide-renderer Cx -> oxide_renderer,

  profile chrome_sandbox {
    /usr/lib/@{multiarch}/oxide-qt/oxide-renderer Px -> com.ubuntu.developer.jdstrand.test-oxide_test-oxide_0.1//oxide_renderer,
  }

  profile oxide_renderer { }
}

$ apparmor_parser -p /tmp/foo >/dev/null
AppArmor parser error for /tmp/foo in /tmp/foo at line 6: Found unexpected character: '.'

I can also quote the child profile like so:
  profile chrome_sandbox {
    /usr/lib/@{multiarch}/oxide-qt/oxide-renderer Px -> "com.ubuntu.developer.jdstrand.test-oxide_test-oxide_0.1//oxide_renderer",
  }

$ apparmor_parser -p /tmp/bar >/dev/null
AppArmor parser error for /tmp/bar in /tmp/bar at line 6: Found unexpected character: '"'

Tags: aa-parser
Changed in apparmor (Ubuntu):
status: New → Triaged
importance: Undecided → Low
tags: added: aa-parser
Changed in apparmor:
status: New → Triaged
importance: Undecided → Low
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.