aa-logprof doesn't propose abstractions for network rules
Bug #1380368 reported by
Christian Boltz
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
AppArmor |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
# aa-logprof
Reading log entries from /var/log/
Updating AppArmor profiles in /etc/apparmor.d.
Complain-mode changes:
Profile: /home/sys-tmp/ping
Network Family: inet
Socket Type: dgram
[(A)llow] / (D)eny / (I)gnore / Audi(t) / Abo(r)t / (F)inish
# grep inet /etc/apparmor.
network inet stream,
network inet6 stream,
network inet dgram,
network inet6 dgram,
aa-logprof should offer two options:
[1] #include <abstractions/
[2] network inet dgram
To post a comment you must log in.
Fixed in bzr r2764.