touch-packages team mailing list archive

[Steve Beattie <sbeattie@xxxxxxxxxx>]

** Also affects: apparmor (Ubuntu)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1431717

Title:
  audit qualifier does not become effective

Status in AppArmor Linux application security framework:
  Confirmed
Status in apparmor package in Ubuntu:
  New

Bug description:
  1. profile:
  #include <tunables/global>

  /root/zz/a.out {
    #include <abstractions/base>

    audit /bin/bash ux,
    /etc/ld.so.preload r,

    profile subbash {
      #include <abstractions/base>
      #include <abstractions/bash>
      /etc/ld.so.preload r,
    }
  }

  2. source file of /root/zz/a.out
  int main(){
          system("/bin/ls /");
          return 0;
  }

  3. when execute ./a.out, there is no record in
  /var/log/audit/audit.log.

To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1431717/+subscriptions