** Also affects: apparmor
Importance: Undecided
Status: New
** Changed in: apparmor
Importance: Undecided => Low
** Changed in: apparmor
Status: New => Triaged
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/595714
Title:
aa-status doesn't report an application as unconfined when using path
globbing
Status in AppArmor Linux application security framework:
Triaged
Status in “apparmor” package in Ubuntu:
Triaged
Bug description:
Binary package hint: apparmor
If I do the following:
$ sudo apparmor_parser -R /etc/apparmor.d/usr.bin.evince
$ evince &
$ sudo apparmor_parser -r /etc/apparmor.d/usr.bin.evince
$ sudo aa-status
I get:
1 processes are unconfined but have a profile defined.
/usr/bin/evince (1756)
Good.
If I do:
$ sudo apparmor_parser -R /etc/apparmor.d/usr.bin.firefox
$ firefox &
$ sudo apparmor_parser -r /etc/apparmor.d/usr.bin.firefox
$ sudo aa-status
I get:
0 processes are unconfined but have a profile defined.
This is because the firefox uses the following to define the pathname:
/usr/lib/firefox-3.5.*/firefox { ... }
aa-status should be updated to support path name globbing.
To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/595714/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
