aa-genprof fails with "Use of uninitialized value in split"

[S Johnsen]

Hello,

I tried to create a apparmor profile for wine today. I proceeded as normal when invoking aa-genprof
"root@mybox:~# aa-genprof wine"
At the beginning things looked as usual and I fired up wine with the game Fallout, but when I then tried to parse the log things became ugly

<START aa-genprof output>
Please start the application to be profiled in
another window and exercise its functionality now.

Once completed, select the "Scan" button below in
order to scan the system logs for AppArmor events.

For each AppArmor event, you will be given the
opportunity to choose whether the access should be
allowed or denied.

Profiling: /usr/bin/wine

[(S)can system log for SubDomain events] / (F)inish
Reading log entries from /var/log/messages.
Updating AppArmor profiles in /etc/apparmor.d.
Use of uninitialized value in split at /usr/share/perl5/Immunix/SubDomain.pm line 2145, <$LOG> line 15439.
Use of uninitialized value in string ne at /usr/share/perl5/Immunix/SubDomain.pm line 2155, <$LOG> line 15439.

Log contains unknown mode mce=rofile.
<END aa-genprof>

I am no perl programmer, but to me this looks like some memory that was over-written which wasn't supposed to...
I tried the procedure also with the autorun.exe of Diablo, the same thing happened. Interestingly though this is what I received from trying the same with ping:

<START aa-genprof output>
Reading log entries from /var/log/messages.
Updating AppArmor profiles in /etc/apparmor.d.
Complain-mode changes:

Profile: /bin/ping
Capability: net_raw
Severity: 8

[(A)llow] / (D)eny / Abo(r)t / (F)inish
<END aa-genprof>

My system is set up as follows:
Ubuntu 8.04 (AMD64), distribution kernel 2.6.24-16-generic
Intel C2D

I hope this makes more sense to you than to me, and thank you for your time.
Best regards
Stian Johnsen

[Jamie Strandboge (jdstrand)]

This should be fixed in the latest apparmor packages. Can you try in either Ubuntu 9.10 or an up-to-date 8.04 LTS (as initially reported by you). Thanks!

[Jamie Strandboge (jdstrand)]

We are closing this bug report because it lacks the information we need to investigate the problem, as described in the previous comments. Please reopen it if you can give us the missing information, and don't hesitate to submit bug reports in the future. To reopen the bug report you can click on the current status, under the Status column, and change the Status back to "New". Thanks again!

[mugshot (mugshot-)]

I have this issue, with apache2.

Ubuntu 8.04.4 LTS

# aa-logprof
Reading log entries from /var/log/messages.
Updating AppArmor profiles in /etc/apparmor.d.
Use of uninitialized value in split at /usr/share/perl5/Immunix/SubDomain.pm line 2145, <$LOG> line 315690.
Use of uninitialized value in string ne at /usr/share/perl5/Immunix/SubDomain.pm line 2155, <$LOG> line 315690.
Use of uninitialized value in string eq at /usr/share/perl5/Immunix/SubDomain.pm line 2202, <$LOG> line 769977.
Use of uninitialized value in split at /usr/share/perl5/Immunix/SubDomain.pm line 2145, <$LOG> line 1717348.
... 8< .... (snip)

 Log contains unknown mode 19:2357059):.

# apt-get install apparmor-utils
Reading package lists... Done
Building dependency tree
Reading state information... Done
apparmor-utils is already the newest version.

Please let me know if I can offer additional assistance.

[Jamie Strandboge (jdstrand)]

The perl tool shave been deprecated.