diff -u apparmor-2.1+1075/profiles/apparmor.d/abstractions/base apparmor-2.1+1075/profiles/apparmor.d/abstractions/base --- apparmor-2.1+1075/profiles/apparmor.d/abstractions/base +++ apparmor-2.1+1075/profiles/apparmor.d/abstractions/base @@ -104,4 +104,7 @@ @{PROC}/cpuinfo r, + # glibc's *printf protections read the maps file + @{PROC}/*/maps r, + # some applications will display license information /usr/share/common-licenses/** r, diff -u apparmor-2.1+1075/debian/changelog apparmor-2.1+1075/debian/changelog --- apparmor-2.1+1075/debian/changelog +++ apparmor-2.1+1075/debian/changelog @@ -1,3 +1,12 @@ +apparmor (2.1+1075-0ubuntu9.3) hardy-proposed; urgency=low + + * abstractions/base: backport the rule that allows /proc/*/maps + so that libc6 catch_segfault() can read them and because + other glibc *printf protections read the maps file too. + (LP: #668479) + + -- Ken Stailey Tue, 29 Oct 2010 14:14:14 -0400 + apparmor (2.1+1075-0ubuntu9.2) hardy-proposed; urgency=low * SubDomain.pm: Ignore "force-complain/" to prevent aa-genprof from failing.