touch-packages team mailing list archive

Thread
Date

[Bug 1238007] Re: aa-clickhook -f does not properly consider changes to abstractions and #include directories

To: touch-packages@xxxxxxxxxxxxxxxxxxx
From: Jamie Strandboge <jamie@xxxxxxxxxx>
Date: Thu, 30 Oct 2014 19:56:37 -0000
Reply-to: Bug 1238007 <1238007@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

This could be solved by performing a checksum of 'apparmor_parser -p',
storing it and then do comparisons against it later. This does have a
performance impact, but could conceivably cleanup the boot logic quite a
bit.

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to click-apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1238007

Title:
  aa-clickhook -f does not properly consider changes to abstractions and
  #include directories

Status in “click-apparmor” package in Ubuntu:
  Triaged

Bug description:
  click-apparmor tries very hard to only use apparmor_parser when
  needed, but it is too aggressive currently. Right now it will only hit
  the parser if the output of easyprof changes. However, if an
  abstraction changes or something in the new
  /usr/share/apparmor/hardware directories change, the policy won't be
  updated. This needs to be fixed.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/click-apparmor/+bug/1238007/+subscriptions