2.13.4: make -C profiles check-parser fails (Invalid capability net_bind_service.)
When packaging 2.13.4 for Arch Linux I ran the various tests:
make -C libraries/libapparmor check
make -C binutils check
make -C profiles check-parser
The last one fails though:
make: Entering directory '/build/apparmor/src/apparmor-2.13.4/profiles'
for profile in ./apparmor.d/bin.ping ./apparmor.d/lsb_release ./apparmor.d/nvidia_modprobe ./apparmor.d/sbin.klogd ./apparmor.d/sbin.syslogd ./apparmor.d/sbin.syslog-ng ./apparmor.d/usr.lib.apache2.mpm-prefork.apache2 ./apparmor.d/usr.lib.dovecot.anvil ./apparmor.d/usr.lib.dovecot.auth ./apparmor.d/usr.lib.dovecot.config ./apparmor.d/usr.lib.dovecot.deliver ./apparmor.d/usr.lib.dovecot.dict ./apparmor.d/usr.lib.dovecot.dovecot-auth ./apparmor.d/usr.lib.dovecot.dovecot-lda ./apparmor.d/usr.lib.dovecot.imap ./apparmor.d/usr.lib.dovecot.imap-login ./apparmor.d/usr.lib.dovecot.lmtp ./apparmor.d/usr.lib.dovecot.log ./apparmor.d/usr.lib.dovecot.managesieve ./apparmor.d/usr.lib.dovecot.managesieve-login ./apparmor.d/usr.lib.dovecot.pop3 ./apparmor.d/usr.lib.dovecot.pop3-login ./apparmor.d/usr.lib.dovecot.ssl-params ./apparmor.d/usr.lib.dovecot.stats ./apparmor.d/usr.sbin.apache2 ./apparmor.d/usr.sbin.avahi-daemon ./apparmor.d/usr.sbin.dnsmasq ./apparmor.d/usr.sbin.dovecot ./apparmor.d/usr.sbin.identd ./apparmor.d/usr.sbin.mdnsd ./apparmor.d/usr.sbin.nmbd ./apparmor.d/usr.sbin.nscd ./apparmor.d/usr.sbin.ntpd ./apparmor.d/usr.sbin.smbd ./apparmor.d/usr.sbin.smbldap-useradd ./apparmor.d/usr.sbin.traceroute ./apparmor.d/usr.sbin.winbindd; do \
fn=$(basename $profile); \
echo "# Site-specific additions and overrides for '$fn'" > ./apparmor.d/local/$fn; \
grep "include[[:space:]]\\+<local/$fn>" "$profile" >/dev/null || { echo "$profile doesn't contain #include <local/$fn>" ; exit 1; } ; \
done; \
*** Checking profiles from ./apparmor.d and ./apparmor/profiles/extras/ against apparmor_parser
Cache read/write disabled: interface file missing. (Kernel needs AppArmor 2.4 compatibility patch.)
AppArmor parser error for ./apparmor.d/bin.ping in /build/apparmor/src/apparmor-2.13.4/profiles/apparmor.d/abstractions/nis at line 14: Invalid capability net_bind_service.
make: *** [Makefile:97: check-parser] Error 1
make: Leaving directory '/build/apparmor/src/apparmor-2.13.4/profiles'
Full build log: apparmor-2.13.4-build.log