[Bug 390810] Re: apparmor_parser does not allow regex when using change_profile

2009-08-04 Thread Launchpad Bug Tracker
This bug was fixed in the package apparmor - 2.3.1+1403-0ubuntu8 --- apparmor (2.3.1+1403-0ubuntu8) karmic; urgency=low * Update to upstream subversion r1431. - change_profile can use regex (LP: #390810, #401931) * debian/apparmor.init: always clear cache on reload. -- Kees

[Bug 390810] Re: apparmor_parser does not allow regex when using change_profile

2009-08-03 Thread Launchpad Bug Tracker
** Branch linked: lp:~ubuntu-core-dev/apparmor/ubuntu -- apparmor_parser does not allow regex when using change_profile https://bugs.launchpad.net/bugs/390810 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list

[Bug 390810] Re: apparmor_parser does not allow regex when using change_profile

2009-07-20 Thread Jamie Strandboge
Changing to Wishlist and removing milestone. This is no longer a blocker and can be worked around by doing: #include tunables/global @{LIBVIRT}=libvirt /usr/sbin/libvirtd { ... change_profile - @{LIBVIRT}-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, ... Thanks Kees! ** Changed in:

[Bug 390810] Re: apparmor_parser does not allow regex when using change_profile

2009-07-19 Thread Jamie Strandboge
Marking to High due to blocking a blueprint. ** Changed in: apparmor (Ubuntu Karmic) Importance: Medium = High -- apparmor_parser does not allow regex when using change_profile https://bugs.launchpad.net/bugs/390810 You received this bug notification because you are a member of Ubuntu Bugs,

[Bug 390810] Re: apparmor_parser does not allow regex when using change_profile

2009-07-19 Thread Jamie Strandboge
This bug was originally found on Jaunty. Retested and it also affects Karmic. This is a blocker for https://wiki.ubuntu.com/SecurityTeam/Specifications/AppArmorLibvirtProfile (bug #388422). ** Description changed: Binary package hint: apparmor Using the following in a profile is not

[Bug 390810] Re: apparmor_parser does not allow regex when using change_profile

2009-07-19 Thread Kees Cook
The lexer needs either a leading slash or a variable name to indicate the start of a token. As a work-around: #include tunables/global @{EMPTY}= /usr/sbin/libvirtd flags=(complain) { ... change_profile - @{EMPTY}[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*-[0-9a-f]*, Should the target profile

[Bug 390810] Re: apparmor_parser does not allow regex when using change_profile

2009-06-22 Thread Jamie Strandboge
Assigned to John based on discussion on IRC. -- apparmor_parser does not allow regex when using change_profile https://bugs.launchpad.net/bugs/390810 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list