← Back to team overview

touch-packages team mailing list archive

[Bug 1378095] [NEW] aa-complain traceback when marking multiple profiles

 

You have been subscribed to a public bug:

$ sudo aa-complain /etc/apparmor.d/usr.lib.postfix.*
Setting /etc/apparmor.d/usr.lib.postfix.anvil to complain mode.
Traceback (most recent call last):
  File "/usr/sbin/aa-complain", line 30, in <module>
    tool.cmd_complain()
  File "/usr/lib/python3/dist-packages/apparmor/tools.py", line 171, in cmd_complain
    apparmor.read_profiles()
  File "/usr/lib/python3/dist-packages/apparmor/aa.py", line 2573, in read_profiles
    read_profile(profile_dir + '/' + file, True)
  File "/usr/lib/python3/dist-packages/apparmor/aa.py", line 2599, in read_profile
    profile_data = parse_profile_data(data, file, 0)
  File "/usr/lib/python3/dist-packages/apparmor/aa.py", line 2853, in parse_profile_data
    store_list_var(filelist[file]['lvar'], list_var, value, var_operation, file)
  File "/usr/lib/python3/dist-packages/apparmor/aa.py", line 3277, in store_list_var
    raise AppArmorException(_('Redefining existing variable %s: %s in %s') % (list_var, value, filename))
apparmor.common.AppArmorException: 'Redefining existing variable @{TFTP_DIR}: /var/tftp /srv/tftpboot in /etc/apparmor.d/usr.sbin.dnsmasq'


$ sudo grep -R TFTP_DIR /etc/apparmor.d/
/etc/apparmor.d/usr.sbin.dnsmasq:@{TFTP_DIR}=/var/tftp /srv/tftpboot
/etc/apparmor.d/usr.sbin.dnsmasq:  @{TFTP_DIR}/ r,
/etc/apparmor.d/usr.sbin.dnsmasq:  @{TFTP_DIR}/** r,

Looks like the tools are re-parsing everything, but not resetting
whatever is storing the variable declarations.

** Affects: apparmor
     Importance: Medium
         Status: Fix Committed

** Affects: apparmor/2.9
     Importance: Medium
         Status: Fix Committed

** Affects: apparmor/master
     Importance: Medium
         Status: Fix Committed

** Affects: apparmor (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: aa-tools
-- 
aa-complain traceback when marking multiple profiles
https://bugs.launchpad.net/bugs/1378095
You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu.