File apparmor-check-qualifier-for-autodep.patch of Package apparmor

Overview Repositories Revisions Requests Users Attributes Meta

File apparmor-check-qualifier-for-autodep.patch of Package apparmor

Subject: Use check_qualifiers for aa-autodep
References: bsc#1139870

Use check_qualifiers for aa-autodep.
Change the executable filenames in logprof.conf so it resolves to correct filenames.

Index: apparmor-2.8.2/utils/aa-autodep
===================================================================
--- apparmor-2.8.2.orig/utils/aa-autodep
+++ apparmor-2.8.2/utils/aa-autodep
@@ -88,12 +88,7 @@ for my $profiling (@profiling) {
 
     # make sure that the app they're requesting to profile is not marked as
     # not allowed to have it's own profile
-    if ($qualifiers{$fqdbin}) {
-        unless ($qualifiers{$fqdbin} =~ /p/) {
-            UI_Info(sprintf(gettext('%s is currently marked as a program that should not have it\'s own profile.  Usually, programs are marked this way if creating a profile for them is likely to break the rest of the system.  If you know what you\'re doing and are certain you want to create a profile for this program, edit the corresponding entry in the [qualifiers] section in /etc/apparmor/logprof.conf.'), $fqdbin));
-            exit 1;
-        }
-    }
+    check_qualifiers($fqdbin);
 
     if (-e $fqdbin) {
         if (-e getprofilefilename($fqdbin) && !$force) {
Index: apparmor-2.8.2/utils/logprof.conf
===================================================================
--- apparmor-2.8.2.orig/utils/logprof.conf
+++ apparmor-2.8.2/utils/logprof.conf
@@ -57,24 +57,24 @@
   /usr/lib/YaST2/servers_non_y2/ag_logprof = u
 
   # these ones shouln't have their own profiles
-  /bin/awk      = icn
-  /bin/cat      = icn
-  /bin/chmod    = icn
-  /bin/chown    = icn
-  /bin/cp       = icn
-  /bin/gawk     = icn
-  /bin/grep     = icn
-  /bin/gunzip   = icn
-  /bin/gzip     = icn
-  /bin/kill     = icn
-  /bin/ln       = icn
-  /bin/ls       = icn
-  /bin/mkdir    = icn
-  /bin/mv       = icn
-  /bin/readlink = icn
-  /bin/rm       = icn
-  /bin/sed      = icn
-  /bin/touch    = icn
+  /usr/bin/awk      = icn
+  /usr/bin/cat      = icn
+  /usr/bin/chmod    = icn
+  /usr/bin/chown    = icn
+  /usr/bin/cp       = icn
+  /usr/bin/gawk     = icn
+  /usr/bin/grep     = icn
+  /usr/bin/gunzip   = icn
+  /usr/bin/gzip     = icn
+  /usr/bin/kill     = icn
+  /usr/bin/ln       = icn
+  /usr/bin/ls       = icn
+  /usr/bin/mkdir    = icn
+  /usr/bin/mv       = icn
+  /usr/bin/readlink = icn
+  /usr/bin/rm       = icn
+  /usr/bin/sed      = icn
+  /usr/bin/touch    = icn
   /sbin/killall5 = icn
   /usr/bin/find = icn
   /usr/bin/killall = icn

Places

File apparmor-check-qualifier-for-autodep.patch of Package apparmor

Places