Feel free to send out what you have now (with a "just FYI, WIP" note) -
maybe I can help in some details.
For "my" invalid rule: Well, I managed to pick an example that is "more
invalid" than yours ;-)
What I wanted to know is - if there's another parameter between two bus=...
parameters, will your patch still accept the rule? Let's say something like
dbus send bus=session path=/com/example/path bus=system,
(Yes, that's an invalid rule because of the second "bus=...". I just want to
know what your patch says about it ;-)
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1628286
Title:
[utils] DBus rules enforce stricter ordering of dbus attributes
Status in AppArmor:
In Progress
Status in apparmor-easyprof-ubuntu package in Ubuntu:
Won't Fix
Bug description:
The DBus rules data strutures added recently (after the 2.10.95 beta 1
release) include a more strcit interpretation of dbus attribute
ordering than before and is more strict than the parser:
[parser]$ cat /tmp/aa-test-dir/test.profile
profile t /t {
dbus (receive, send) path=/com/canonical/UbuntuAppLaunch/* bus=session,
}
[parser]$ ./apparmor_parser -QK -d /tmp/aa-test-dir/test.profile
----- Debugging built structures -----
Name: t
Profile Mode: Enforce
dbus ( send receive ) bus="session" path="/com/canonical/UbuntuAppLaunch/*",
[parser]$ ./apparmor_parser --version
AppArmor parser version 2.10.95
Copyright (C) 1999-2008 Novell Inc.
Copyright 2009-2012 Canonical Ltd.
[parser]$ cd ../utils/
[utils]$ PYTHONPATH=. python3 ./aa-logprof -d /tmp/aa-test-dir
Reading log entries from /var/log/syslog.
Updating AppArmor profiles in /tmp/aa-test-dir.
ERROR: Invalid or unknown keywords in 'dbus (receive, send)
path=/com/canonical/UbuntuAppLaunch/* bus=session
To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1628286/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
