touch-packages team mailing list archive
-
touch-packages team
-
Mailing list archive
-
Message #66729
[Bug 1431717] Re: audit qualifier does not become effective
This bug was fixed in the package apparmor - 2.9.1-0ubuntu8
---------------
apparmor (2.9.1-0ubuntu8) vivid; urgency=medium
[ Steve Beattie ]
* debian/rules: run make check on the libapparmor library
* add-chromium-browser.patch: add support for chromium policies
(LP: #1419294)
* debian/apparmor.{init,upstart}: add support for triggering
aa-profile-hook runs when packages are updated via snappy system
image updates (LP: #1434143)
* parser-fix_modifier_compilation_+_tests.patch: fix compilation
of audit modifiers for exec and pivot_root and deny modifiers on
link rules as well as significantly expand related tests
(LP: #1431717, LP: #1432045, LP: #1433829)
* tests-fix_systemd_breakage_in_pivot_root-lp1436109.patch: work
around pivot_root test failures due to init=systemd (LP: #1436109)
* GDM_X_authority-lp1432126.patch: add location GDM creates Xauthority
file to X abstraction (LP: #1432126)
[ Jamie Strandboge ]
* easyprof-framework-policy.patch: add --include-templates-dir and
--include-policy-groups-dir options to easyprof to support framework
policy on snappy
[ Robie Basak ]
* Add /lib/apparmor/profile-load; moved from
/lib/init/apparmor-profile-load from the upstart package. A wrapper at
the original path is now provided by init-system-helpers. (LP: #1432683)
-- Jamie Strandboge <jamie@xxxxxxxxxx> Sat, 28 Mar 2015 07:22:30 -0500
** Changed in: apparmor (Ubuntu)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1431717
Title:
audit qualifier does not become effective
Status in AppArmor Linux application security framework:
Confirmed
Status in apparmor package in Ubuntu:
Fix Released
Bug description:
1. profile:
#include <tunables/global>
/root/zz/a.out {
#include <abstractions/base>
audit /bin/bash ux,
/etc/ld.so.preload r,
profile subbash {
#include <abstractions/base>
#include <abstractions/bash>
/etc/ld.so.preload r,
}
}
2. source file of /root/zz/a.out
int main(){
system("/bin/ls /");
return 0;
}
3. when execute ./a.out, there is no record in
/var/log/audit/audit.log.
To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1431717/+subscriptions