Package: apparmor
Version: 2.13.6-10
Severity: important
Dear Maintainers,
there seems to be a order-logic bug in
/etc/apparmor.d/tunables/home
That profile defines @{HOME} first:
@{HOME}=@{HOMEDIRS}/*/ /root/
and *later* defines @{HOMEDIRS}:
@{HOMEDIRS}=/home/
It seems that either the order of definitions needs to be switched or
else the second definition should be
@{HOMEDIRS}+=/home/ #(note the + sign)
? Or am I missing something.
Thanks,
Karsten
-- System Information:
Debian Release: 11.2
APT prefers stable
APT policy: (990, 'stable'), (500, 'unstable-debug'), (500,
'stable-updates'), (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 5.15.0-2-686-pae (SMP w/2 CPU threads)
Kernel taint flags: TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages apparmor depends on:
ii debconf [debconf-2.0] 1.5.77
ii libc6 2.33-1
ii lsb-base 11.1.0
apparmor recommends no packages.
Versions of packages apparmor suggests:
pn apparmor-profiles-extra <none>
pn apparmor-utils <none>
-- debconf information:
apparmor/homedirs:
