← Back to team overview

touch-packages team mailing list archive

[Bug 1493667] [NEW] Missing registry endpoint for unconfined scopes

 

Public bug reported:

The ubuntu-scope-network profile current does not list Registry-R as an
accessible endpoint (only Registry-s and Registry-p). We need the
Registry-R endpoint accessible to confined scopes as well, otherwise
they can't query the registry for existing scopes.

This endpoint was meant to be accessible all along. We never noticed
that it was missing until now because, normally, only aggregators call
list() and get_metadata(), and aggregators run unconfined. But the
methods need to be accessible to confined scopes too.

Could you please add the Registry-R endpoint?

** Affects: apparmor-easyprof-ubuntu (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor-easyprof-ubuntu
in Ubuntu.
https://bugs.launchpad.net/bugs/1493667

Title:
  Missing registry endpoint for unconfined scopes

Status in apparmor-easyprof-ubuntu package in Ubuntu:
  New

Bug description:
  The ubuntu-scope-network profile current does not list Registry-R as
  an accessible endpoint (only Registry-s and Registry-p). We need the
  Registry-R endpoint accessible to confined scopes as well, otherwise
  they can't query the registry for existing scopes.

  This endpoint was meant to be accessible all along. We never noticed
  that it was missing until now because, normally, only aggregators call
  list() and get_metadata(), and aggregators run unconfined. But the
  methods need to be accessible to confined scopes too.

  Could you please add the Registry-R endpoint?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor-easyprof-ubuntu/+bug/1493667/+subscriptions


Follow ups