So the issue here is that, due to logprof not taking into account some
logging changes, it was dropping 'exec' events that occurred when the
profile in question was in enforcing mode; it would catch it if it was
in complain mode (because of the generated null profile on exec in
complain mode). I've sent a patch for review to the upstream mailing
list: https://lists.ubuntu.com/archives/apparmor/2012-March/002519.html
.
However, with just that patch applied, I get a couple of perl warnings
that patch 3/4 in that series addresses.
** Changed in: apparmor (Ubuntu Precise)
Status: New => In Progress
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/872446
Title:
aa-logprof should detect denials as well as complaints
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/872446/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
