[apparmor] alias rules broken for /{,var/}run/

John Johansen john.johansen at canonical.com
Tue Nov 1 19:20:15 UTC 2011


On 11/01/2011 02:10 PM, Christian Boltz wrote:
> Hello,
> 
> Am Dienstag, 1. November 2011 schrieb John Johansen:
>> I have spent more time looking at this and it will be fixed in the
>> next release.  The real question is whether we will fix this in 2.7,
>> it will be a larger patch but is doable.  How important would you
>> rate fixing this in 2.7
> 
> Well, it breaks several profiles on my system ;-)
> 
> OTOH, I didn't see any bugreport about it on bnc - maybe I'm the only 
> one using a symlinked /var/ ?
> 
> That said: How big is the risk that your patch breaks something else? 
> If the risk is low, take it for 2.7. Otherwise commit it after the 2.7 
> release and give it some testing.
> 
There is certainly risk, the patch will be fairly large I am guess on
the order of several hundred lines of code.  It would have to come with
regression tests.

Right now I am of the mind that we fix it in the dev branch, and then
we can consider back porting it for 2.7.1




More information about the AppArmor mailing list