** Attachment added: "profile for the test script (after running genprof AND 
logprof)"
   
https://bugs.launchpad.net/apparmor/+bug/1014304/+attachment/3193612/+files/home.cb.linuxtag.apparmor.scripts.hello

-- 
You received this bug notification because you are a member of AppArmor
Developers, which is the registrant for AppArmor.
https://bugs.launchpad.net/bugs/1014304

Title:
  genprof misses some permissions

Status in AppArmor Linux application security framework:
  New

Bug description:
  Take this little demo script:

  #!/bin/bash
  echo "Hello World!" > /tmp/hello.txt
  cat /tmp/hello.txt
  rm /tmp/hello.txt

  I created a profile for it using genprof. Most important point: select
  "child" for executing /bin/rm, see attached screendump.txt for
  details.

  When I run logprof after the genprof run, it proposes
      Profile:  /home/cb/linuxtag/apparmor/scripts/hello
      Path:     /usr/bin/rm
      Old Mode: Cx
      New Mode: rCx

  That's something genprof should have catched...

To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1014304/+subscriptions

-- 
AppArmor mailing list
AppArmor@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to