touch-packages team mailing list archive
-
touch-packages team
-
Mailing list archive
-
Message #129179
[Bug 1534869] Re: "deny file" -> Invalid mode
** Tags added: aa-parser
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1534869
Title:
"deny file" -> Invalid mode
Status in AppArmor:
New
Status in apparmor package in Ubuntu:
New
Bug description:
File tst/simple_tests/file/ok_bare_1.sd from the test suite doesn't
parse correctly:
sarnold@hunt:~/trees/apparmor/parser$ cat tst/simple_tests/file/ok_bare_1.sd
#
#=Description bare file rule
#=EXRESULT PASS
#
/usr/bin/foo {
deny file,
}
sarnold@hunt:~/trees/apparmor/parser$ ./apparmor_parser -Qd tst/simple_tests/file/ok_bare_1.sd
AppArmor parser error for tst/simple_tests/file/ok_bare_1.sd in tst/simple_tests/file/ok_bare_1.sd at line 6: Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', 'p', or 'u'
This is checkout at version 3338
This also exists in at least trusty's apparmor_parser too: 2.8.95~2430-0ubuntu5.3
$ apparmor_parser -Qd tst/simple_tests/file/ok_bare_1.sd
AppArmor parser error for tst/simple_tests/file/ok_bare_1.sd in tst/simple_tests/file/ok_bare_1.sd at line 6: Invalid mode, in deny rules 'x' must not be preceded by exec qualifier 'i', 'p', or 'u'
To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1534869/+subscriptions
References