"deny file" -> Invalid mode

Bug #1534869 reported by Seth Arnold on 2016-01-16
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
AppArmor
Undecided
Unassigned
apparmor (Ubuntu)
Undecided
Unassigned

Bug Description

File tst/simple_tests/file/ok_bare_1.sd from the test suite doesn't parse correctly:

sarnold@hunt:~/trees/apparmor/parser$ cat tst/simple_tests/file/ok_bare_1.sd
#
#=Description bare file rule
#=EXRESULT PASS
#
/usr/bin/foo {
  deny file,
}
sarnold@hunt:~/trees/apparmor/parser$ ./apparmor_parser -Qd tst/simple_tests/file/ok_bare_1.sd
AppArmor parser error for tst/simple_tests/file/ok_bare_1.sd in tst/simple_tests/file/ok_bare_1.sd at line 6: Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', 'p', or 'u'

This is checkout at version 3338

This also exists in at least trusty's apparmor_parser too: 2.8.95~2430-0ubuntu5.3

$ apparmor_parser -Qd tst/simple_tests/file/ok_bare_1.sd
AppArmor parser error for tst/simple_tests/file/ok_bare_1.sd in tst/simple_tests/file/ok_bare_1.sd at line 6: Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', 'p', or 'u'

Christian Boltz (cboltz) on 2016-01-16
tags: added: aa-parser
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers