touch-packages team mailing list archive

[John Johansen <john.johansen@xxxxxxxxxxxxx>]

Public bug reported:

The change_profile permission does not allow the audit, allow, or deny
qualifiers to be specified as part of policy.

All of these rules will fail
  allow change_profile -> b,
  deny change_profile -> b,
  audit change_profile -> b,

Also change_profile does not currently support specifying just the keyword to indicate all permissions options. ie.
  change_profile,

** Affects: apparmor (Ubuntu)
     Importance: Low
         Status: Confirmed

** Changed in: apparmor (Ubuntu)
       Status: New => Confirmed

** Changed in: apparmor (Ubuntu)
   Importance: Undecided => Low

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1434018

Title:
  change_profile doesn't work with audit or deny qualifiers

Status in apparmor package in Ubuntu:
  Confirmed

Bug description:
  The change_profile permission does not allow the audit, allow, or deny
  qualifiers to be specified as part of policy.

  All of these rules will fail
    allow change_profile -> b,
    deny change_profile -> b,
    audit change_profile -> b,

  Also change_profile does not currently support specifying just the keyword to indicate all permissions options. ie.
    change_profile,

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1434018/+subscriptions