Comment 0 for bug 982619

Julian Taylor (jtaylor) wrote :

apparmor accepts the PUx qualifier
but when aa-logprof updates a profile that uses that it transforms it to UPx which apparmor does not accept.
It then complains:
AppArmor parser error for /etc/apparmor.d/home.jtaylor.tmp.test.sh in /etc/apparmor.d/home.jtaylor.tmp.test.sh at line 22: syntax error, unexpected TOK_ID, expecting TOK_MODE

e.g.
#include <tunables/global>

/home/jtaylor/tmp/test.sh {
  #include <abstractions/base>
  #include <abstractions/bash>

  /usr/bin/gedit rPUx,

}

put something else than gedit in /home/jtaylor/tmp/test.sh and run logprof and it will break the profile.