touch-packages team mailing list archive

[Steve Beattie <sbeattie@xxxxxxxxxx>]

** Also affects: apparmor
   Importance: Undecided
       Status: New

** Changed in: apparmor
       Status: New => Confirmed

** Changed in: apparmor
   Importance: Undecided => Low

** Tags added: aa-parser

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1434018

Title:
  change_profile doesn't work with audit or deny qualifiers

Status in AppArmor Linux application security framework:
  Confirmed
Status in apparmor package in Ubuntu:
  Confirmed

Bug description:
  The change_profile permission does not allow the audit, allow, or deny
  qualifiers to be specified as part of policy.

  All of these rules will fail
    allow change_profile -> b,
    deny change_profile -> b,
    audit change_profile -> b,

  Also change_profile does not currently support specifying just the keyword to indicate all permissions options. ie.
    change_profile,

To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1434018/+subscriptions