Ubuntu
apparmor package

  1. Bug #390810
  2. Comment #4

Comment 4 for bug 390810

Revision history for this message
Kees Cook (kees) wrote :

The lexer needs either a leading slash or a variable name to indicate the start of a token. As a work-around:

#include <tunables/global>
@{EMPTY}=""

/usr/sbin/libvirtd flags=(complain) {
  ...
  change_profile -> @{EMPTY}[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*,

Should the target profile be name-spaced? i.e. libvirtd-@{EMPTY}[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]* ?