Public bug reported:

When one creates a incorrect profile, apparmor_parser seems to leave an
artifact of the "problem" file in the same directory, which in turn
leads to another error, when the file gets fixed. Not sure, how appamor
stuff works, but this is simply an unacceptable behavior! It should put
its temp. stuff to its own private directory, if it really needs to make
a copy of whatever ....

E.g.: ( lxc-default == package delivered original)

ls -l /etc/apparmor.d/lxc
total 40
-rw-r--r-- 1 root root  506 Nov 19 21:34 lxc-default
-rw-r--r-- 1 root root  544 Oct 10 06:53 lxc-default-with-mounting
-rw-r--r-- 1 root root  588 Oct 10 06:53 lxc-default-with-nesting

sudo sed -e '/}/ i\\tmount options (rw, bind),' -i 
/etc/apparmor.d/lxc/lxc-default
sudo apparmor_parser -r /etc/apparmor.d/lxc-containers
: AppArmor parser error for /etc/apparmor.d/lxc-containers in 
/etc/apparmor.d/lxc/lxc-default at line 11: Found unexpected character: '('

ls -l /etc/apparmor.d/lxc
total 40
-rw-r--r-- 1 root root  506 Nov 19 21:35 lxc-default
-rw-r--r-- 1 root root  544 Oct 10 06:53 lxc-default-with-mounting
-rw-r--r-- 1 root root  588 Oct 10 06:53 lxc-default-with-nesting
-rw-r--r-- 1 root root  479 Nov 19 21:34 lxc-defaulte

# fix it:
sed -e '/mount options/ s,options ,options=,'  -i 
/etc/apparmor.d/lxc/lxc-default

sudo apparmor_parser -r /etc/apparmor.d/lxc-containers
: Multiple definitions for profile lxc-container-default exist,bailing out.

** Affects: lxc (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1394352

Title:
  apparmor: Multiple definitions ... bailing out

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1394352/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to