Daniel,

Currently it is expected that manually deleting a profile also requires manual 
profile removal from the kernel, using an of
- aa-remove-unknown
- apparmor_parser -R <profile before file deletion>
- sudo bash -c "echo -n '<profile_name>' > 
/sys/kernel/security/apparmor/.remove"

However this does indeed currently leave behind the cache file,
cluttering the file system. However once the profile is removed from the
kernel the cached file should not be applied.

Can you clarify whether you removed the profile from the kernel?

Can you clarify if when you were developing the new profile whether you
changed the filename from the original profile to a different filename
when developing the new profile?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1878333

Title:
  AppArmor cache entries not removed when profile is deleted

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1878333/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to