Skip to content

Replace "existing_profiles" & fix minitools for named profiles

Christian Boltz requested to merge cboltz/apparmor:cboltz-profile-list into master

This patchset introduces the ProfileList class which replaces "existing_profiles" in aa.py and fixes some bugs in aa-complain and the other minitools:

  • aa-complain etc. never found profiles that have a profile name (the attachment wasn't checked)
  • even if the profile name was given as parameter to aa-complain, it first did "which $parameter" so it never matched on named profiles
  • profile names with alternations (without attachment specification) also never matched because the old code didn't use AARE.

References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=882047#92 (search for "As usual" ;-)

See the individual commit messages for details.

All changes survived my tests (both manually and unittests), but as always when doing bigger changes to aa.py, more manual testing is always welcome ;-)

I propose this patch for master..2.12.

Merge request reports