Your message dated Fri, 01 May 2015 16:05:42 +0000
with message-id <[email protected]>
and subject line Bug#771400: fixed in apparmor 2.9.2-1
has caused the Debian Bug report #771400,
regarding apparmor-utils: aa-logprof/aa-genprof not updating policy
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
771400: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=771400
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: apparmor-utils
Version: 2.9.0-2
Severity: important
I recently upgrade to jessie. I noticed now that aa-logprof/aa-genprof
(for apparmor) stopped working. When I try to create a new profile with
aa-genprof it doesn't add any rules while I see them in the logs. Same
with aa-logprof (both worked just fine in wheezy).
How to reproduce:
1. Make test script `/home/user/test-aa`:
#!/bin/sh
ls /
2. Run (as root) `aa-genprof /home/user/test-aa`
3. Run (as user) `/home/user/test-aa` which creates a log entry like:
kernel: audit: type=1400 audit(1417247026.817:51):
apparmor="ALLOWED" operation="open" profile="/home/user/test"
name="/" pid=2325 comm="ls" requested_mask="r" denied_mask="r"
fsuid=1000 ouid=0
4. When pressing (S)can in aa-genprof it reads:
Reading log entries from /var/log/syslog.
Profiling: /home/user/test
5. Profile is not updated. aa-genprof should have made an entry like:
/ r,
-- System Information:
Debian Release: jessie/sid
APT prefers testing
APT policy: (600, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages apparmor-utils depends on:
ii apparmor 2.9.0-2
ii libapparmor-perl 2.9.0-2
ii python3 3.4.2-1
ii python3-apparmor 2.9.0-2
apparmor-utils recommends no packages.
Versions of packages apparmor-utils suggests:
pn apparmor-docs <none>
pn vim-addon-manager <none>
-- Configuration Files:
/etc/apparmor/easyprof.conf 60bd3e4b5e848885c704540a6537d365 [Errno 2] No such
file or directory: u'/etc/apparmor/easyprof.conf
60bd3e4b5e848885c704540a6537d365'
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: apparmor
Source-Version: 2.9.2-1
We believe that the bug you reported is fixed in the latest version of
apparmor, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
intrigeri <[email protected]> (supplier of updated apparmor package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 30 Apr 2015 12:46:44 +0200
Source: apparmor
Binary: apparmor apparmor-utils apparmor-profiles apparmor-docs libapparmor-dev
libapparmor1 libapparmor-perl libapache2-mod-apparmor libpam-apparmor
apparmor-notify python-libapparmor python3-libapparmor python-apparmor
python3-apparmor dh-apparmor apparmor-easyprof
Architecture: source all
Version: 2.9.2-1
Distribution: experimental
Urgency: medium
Maintainer: Debian AppArmor Team <[email protected]>
Changed-By: intrigeri <[email protected]>
Description:
apparmor - User-space parser utility for AppArmor
apparmor-docs - Documentation for AppArmor
apparmor-easyprof - AppArmor easyprof profiling tool
apparmor-notify - AppArmor notification system
apparmor-profiles - Profiles for AppArmor Security policies
apparmor-utils - Utilities for controlling AppArmor
dh-apparmor - AppArmor debhelper routines
libapache2-mod-apparmor - changehat AppArmor library as an Apache module
libapparmor-dev - AppArmor development libraries and header files
libapparmor-perl - AppArmor library Perl bindings
libapparmor1 - changehat AppArmor library
libpam-apparmor - changehat AppArmor library as a PAM module
python-apparmor - AppArmor Python utility library
python-libapparmor - AppArmor library Python bindings
python3-apparmor - AppArmor Python3 utility library
python3-libapparmor - AppArmor library Python3 bindings
Closes: 670305 770788 771400 777034 782700
Changes:
apparmor (2.9.2-1) experimental; urgency=medium
.
* Merge Ubuntu changes up to 2.9.1-0ubuntu9, including:
- New upstream 2.9.1 release (Closes: #770788, #771400)
- Replace unnecessary $remote_fs dependency with $local_fs
(Closes: #782700)
* Import new 2.9.2 upstream release (Closes: #670305, #777034).
* Don't install the usr.sbin.cupsd example profile: it is shipped
and enabled by the cups-daemon package already.
* Install the /etc/apparmor.d/tunables/{home,multiarch}.d
directories from upstream.
* Install the sbin.dhclient-script and usr.lib.RealPlayer10.realplay
example profiles in /usr/share/doc/apparmor-profiles/extras/.
* debian/apparmor.install: sort entries in lexical order.
* debian/rules: pass --no-start to dh_installinit since we're handling
reloading profiles manually in the postinst scripts.
* Drop patches applied upstream:
- add-mir-abstraction-lp1422521.patch
- systemd-dev-log-lp1413232.patch
- parser-fix_modifier_compilation_+_tests.patch
- tests-fix_systemd_breakage_in_pivot_root-lp1436109.patch
- GDM_X_authority-lp1432126.patch
- easyprof-framework-policy.patch.
* debian/copyright: remove obsolete paragraph about
profiles/apparmor-profiles.spec.in.
* Override the init.d-script-missing-dependency-on-remote_fs Lintian
warning for the apparmor binary package: the current theory is that
only the click package bits need /usr upon startup.
* Enable the bindnow hardening flag during build.
* libapparmor-dev: install libapparmor.so link in /usr/lib, not in /lib,
as dictated in Debian Policy section 8.4 (Development files).
Checksums-Sha1:
1d4f0c4af3f4ea3a23bcf9ebb095c6258e2f6330 3208 apparmor_2.9.2-1.dsc
ba76ea6b4d69c1a513dc7e80047dcee2c96830fd 2336566 apparmor_2.9.2.orig.tar.gz
58ec3bcac4bde02cd590b30613d2fef95400c9ec 67408 apparmor_2.9.2-1.debian.tar.xz
202bcf475925f28af7d25141fd6ea0e24b146732 71118
apparmor-profiles_2.9.2-1_all.deb
64137000a6db1ab090b436000a8f9303faf0bda0 278674 apparmor-docs_2.9.2-1_all.deb
c8ef1ac5ea50578cb14627c8c33c6941f61fa9a4 53326 apparmor-notify_2.9.2-1_all.deb
a59d3f30ee1424bc92080789a25ea33a151fa75c 49066 dh-apparmor_2.9.2-1_all.deb
45becd75b89f5f1f5ac89b3ed3eb17e1fe3b07d0 51722
apparmor-easyprof_2.9.2-1_all.deb
Checksums-Sha256:
45a43f84c7a3f27ee1c26350a10c8cff18e71b9e4619d3cf4239313c125720cb 3208
apparmor_2.9.2-1.dsc
d01156e1ec50deada519fd4e8821677274b1d43418fda3bc4b25f1d38ea75ed5 2336566
apparmor_2.9.2.orig.tar.gz
309b246ff3b161f667897769cd8ae11e861280ae45fd253d619ea73f3c1d2bff 67408
apparmor_2.9.2-1.debian.tar.xz
fbe589bd53981c6287dfbc279a6486fa90815ebdb290f8833fca73b5fe22f022 71118
apparmor-profiles_2.9.2-1_all.deb
20b75f022dc1498dd15f8a03555ab88931d2ded0e6600d6fc5602c9a19c60a86 278674
apparmor-docs_2.9.2-1_all.deb
76bc11735861e2a4c0af0d4f1cab4e869ae7ee306d116a57bc8f7f912e7b809c 53326
apparmor-notify_2.9.2-1_all.deb
aa0d014a7a8f080fa9e5352feb9e0ce1e6a22585aee0ec8db6d1c98772f036ff 49066
dh-apparmor_2.9.2-1_all.deb
8957d1528d11316ac7684414130a20350e5157fe11431c0eba089cdb2a98ed6c 51722
apparmor-easyprof_2.9.2-1_all.deb
Files:
0ba5c13a49795d4aae6276ae7f30fed3 3208 admin extra apparmor_2.9.2-1.dsc
3af6ef84881016bf8d9100f3f8ab036b 2336566 admin extra apparmor_2.9.2.orig.tar.gz
9ccb36cce7374663c04eec8c08115e21 67408 admin extra
apparmor_2.9.2-1.debian.tar.xz
3aef05fca236d3fb52e23fae172b02ba 71118 admin extra
apparmor-profiles_2.9.2-1_all.deb
ed81b4ddc5a49ffd4aa8db208f18155f 278674 doc extra apparmor-docs_2.9.2-1_all.deb
b2b5507343f03d0cab322086fd0c2f7e 53326 admin extra
apparmor-notify_2.9.2-1_all.deb
fae664d93599662d94e34a9efc6af3c3 49066 devel extra dh-apparmor_2.9.2-1_all.deb
87fe1e96a5f547c18cd4c6a95a110c82 51722 admin extra
apparmor-easyprof_2.9.2-1_all.deb
-----BEGIN PGP SIGNATURE-----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=qFN5
-----END PGP SIGNATURE-----
--- End Message ---
