[arch-general] AppArmor support

David Runge dave at sleepmap.de
Sat Sep 22 15:43:51 UTC 2018


Hi Geo,

On 2018-09-22 15:13:20 (+0200), Geo Kozey wrote:
> After [0] sed rules are applied to all apparmor config files, not just
> profiles which results in unwanted errors:
> 
> configparser.DuplicateOptionError: While reading from
> '/etc/apparmor/logprof.conf' [line 47]: option '/usr/bin/bash' in
> section 'qualifiers' already exists
> 
> You should limit it to profiles only as it was before.
> 
> [0] https://git.archlinux.org/svntogit/community.git/commit/trunk?h=packages/apparmor&id=4dc153bf8e26239a55409ac5d1994f6575e057c5
Thanks for the info!
That was indeed a problem, but not because of the profile modifications.
I did way too broad replacements in logprof.conf, that led to the
duplicate entries you are experiencing (as there are entries for /bin
and /usr/bin for most binaries).

I have now fixed this in 2.13.0-6 (by carefully only replacing the use
of sbin where needed). Please let me know, if this works as intended for
you!

Best,
David

-- 
https://sleepmap.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.archlinux.org/pipermail/arch-general/attachments/20180922/cb9f0c71/attachment.asc>


More information about the arch-general mailing list