Message about AppArmor mediation status goes to stderr instead of stdout
Bug #1217710 reported by
Tyler Hicks
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
dbus (Ubuntu) |
Fix Released
|
Medium
|
Tyler Hicks |
Bug Description
dbus 1.6.12-0ubuntu4 added AppArmor mediation of messages. When dbus-daemon is initializing itself, it prints "AppArmor D-Bus mediation is enabled" to confirm that mediation will be performed. The message is incorrectly printed to stderr instead of stdout:
$ dbus-daemon --session 2>/dev/null
^C
$ dbus-daemon --session 1>/dev/null
AppArmor D-Bus mediation is enabled
^C
To post a comment you must log in.
This bug was fixed in the package dbus - 1.6.12-0ubuntu5
---------------
dbus (1.6.12-0ubuntu5) saucy; urgency=low
* Add support for mediation of D-Bus messages and services. AppArmor D-Bus patches/ aa-build- tools.patch: Update build files to detect and patches/ aa-mediation. patch: Support AppArmor mediation of D-Bus daemon( 1) man page for more details. patches/ aa-get- connection- apparmor- security- context. patch: Add an freedesktop. DBus.GetConnect ionAppArmorSecu rityContext method that patches/ aa-kernel- compat- check.patch: Perform a compatibility ation to determine if everything is in place to perform bilities during the Saucy development release and should be patches/ aa-mediation. patch: Clean up the AppArmor initialization patches/ aa-get- connection- apparmor- security- context. patch: Refresh
rules are described in the apparmor.d(5) man page. dbus-daemon will use
libapparmor to perform queries against the AppArmor policies to determine
if a connection should be able to send messages to another connection, if
a connection should be able to receive messages from another connection,
and if a connection should be able to bind to a well-known name.
- debian/
build against libapparmor
- debian/
messages and services. By default, AppArmor mediation is enabled if
AppArmor is available. To disable AppArmor mediation, place
'<apparmor mode="disabled"/>' in each bus configuration file. See the
dbus-
- debian/
org.
takes the unique name of a connection as input and returns the AppArmor
label attached to the connection
- debian/
check of dbus, libapparmor, and the AppArmor kernel code during
initializ
AppArmor mediation. This is a temporary patch to overcome some potential
incompata
dropped prior to Saucy's release.
- debian/control: Add libapparmor-dev as a Build-Depends
- debian/rules: Specify that D-Bus should be built against libapparmor
during the configure stage of the build
* debian/
- Don't treat any errors from aa_is_enabled() as fatal unless the AppArmor
D-Bus mode is set to "required". This should fix errors when various
test cases need to start dbus-daemon on buildds. (LP: #1217598)
- Don't print to stderr during initialization unless an error has
occurred (LP: #1217710)
- Don't redefine _dbus_warn() to syslog(). A previous comment left in the
code suggested that _dbus_warn() caused segfaults. Testing proves that
is not the case.
* debian/
patch to fix offset warnings after modifying aa-mediation.patch
-- Tyler Hicks <email address hidden> Wed, 28 Aug 2013 13:26:13 -0700