[Bug 139105] Re: Px and Ux do not work with globs

2007-09-12 Thread Martin Pitt
Hm, that is indeed the case. I already have /usr/lib/cups/** ixr, and some specialized rules like /usr/lib/cups/backend/cups-pdf Px. so that /usr/lib/cups/filter/* Ux, is a subset of the first rule. It seems that apparmor does not have a concept of "prefer more special rules", which wou

[Bug 139105] Re: Px and Ux do not work with globs

2007-09-12 Thread jjohansen
It sounds like there are two or more rules in the profile that overlap and have conflicting x mods. AppArmor requires that there is only a single x mode for any given match eg. /usr/lib/cups/filter/* Ux, /usr/lib/** ix, will conflict because the rule with ix overlaps the rule using Ux. The dfa

[Bug 139105] Re: Px and Ux do not work with globs

2007-09-12 Thread Martin Pitt
Dominic, right, this is from /etc/init.d/apparmor reload. I am using version 2.1+961-0ubuntu1, which I built myself from the current Gutsy source package. The previous version is not compatible with the current Gutsy kernel (which has the 2.1 module), and the current source does not build at the

[Bug 139105] Re: Px and Ux do not work with globs

2007-09-12 Thread Dominic Reynolds
What version of apparmor are you using? I'm assuming that this rejection is from the parser (is displayed when you run /etc/init.d/apparmor reload?). -- Px and Ux do not work with globs https://bugs.launchpad.net/bugs/139105 You received this bug notification because you are a member of Ubuntu Bu