On 01/27/2017 12:05 PM, Christian Boltz wrote: > FYI: FileRule accepts the permissions in any order, so maybe you could > look at how it's done there. (Needless to say that having a list of > possible permissions is easier to handle, but maybe it helps > nevertheless.)
I'll have a look at that. > > Please don't forget to run "make check" for the utils ;-) That's why I haven't yet sent the patch out. Sorting out the test changes that need to happen. > > BTW: Does your patch also work for something like > dbus bus=session bind bus=system, No. That's not a valid rule. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu in Ubuntu. https://bugs.launchpad.net/bugs/1628286 Title: [utils] DBus rules enforce stricter ordering of dbus attributes Status in AppArmor: In Progress Status in apparmor-easyprof-ubuntu package in Ubuntu: Won't Fix Bug description: The DBus rules data strutures added recently (after the 2.10.95 beta 1 release) include a more strcit interpretation of dbus attribute ordering than before and is more strict than the parser: [parser]$ cat /tmp/aa-test-dir/test.profile profile t /t { dbus (receive, send) path=/com/canonical/UbuntuAppLaunch/* bus=session, } [parser]$ ./apparmor_parser -QK -d /tmp/aa-test-dir/test.profile ----- Debugging built structures ----- Name: t Profile Mode: Enforce dbus ( send receive ) bus="session" path="/com/canonical/UbuntuAppLaunch/*", [parser]$ ./apparmor_parser --version AppArmor parser version 2.10.95 Copyright (C) 1999-2008 Novell Inc. Copyright 2009-2012 Canonical Ltd. [parser]$ cd ../utils/ [utils]$ PYTHONPATH=. python3 ./aa-logprof -d /tmp/aa-test-dir Reading log entries from /var/log/syslog. Updating AppArmor profiles in /tmp/aa-test-dir. ERROR: Invalid or unknown keywords in 'dbus (receive, send) path=/com/canonical/UbuntuAppLaunch/* bus=session To manage notifications about this bug go to: https://bugs.launchpad.net/apparmor/+bug/1628286/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
