From edaa45067abd5f18fa702ca3f08897d93425bbc5 Mon Sep 17 00:00:00 2001
From: nobody43 <15267739+nobody43@users.noreply.github.com>
Date: Sat, 23 Nov 2024 19:54:17 +0000
Subject: [PATCH] fix exec_path bug, ignore skipable files

---
 tests/profile_check.py | 26 +++++++++++++++-----------
 1 file changed, 15 insertions(+), 11 deletions(-)

diff --git a/tests/profile_check.py b/tests/profile_check.py
index 90f5b56b..9b61e636 100644
--- a/tests/profile_check.py
+++ b/tests/profile_check.py
@@ -186,14 +186,8 @@ def readApparmorFile(fullpath):
                     if m.get('profile'):
                         nestingStacker.append(m.get('profile'))  # set early
 
-                    if m.get('attachment') != '@{exec_path}' and not gotAttach:  # can be only singular
+                    if m.get('attachment') == '@{exec_path}' and not gotAttach:  # can be only singular
                         gotAttach = True
-                        messages.append({'filename':   fullpath,
-                                         'profile':    getCurrentProfile(nestingStacker),
-                                         'severity':   'WARNING',
-                                         'line':       n,
-                                         'reason':     "'@{exec_path}' must be defined as main path attachment",
-                                         'suggestion': None})
                         
                     profileMsg = {'filename':   fullpath,
                                   'profile':    getCurrentProfile(nestingStacker),
@@ -324,6 +318,15 @@ def readApparmorFile(fullpath):
                          'reason':     'ABI is required',
                          'suggestion': abi})
 
+    # Ensure singular '@{exec_path}'
+    if not gotAttach:
+        messages.append({'filename':   fullpath,
+                         'profile':    None,
+                         'severity':   'WARNING',
+                         'line':       None,
+                         'reason':     "'@{exec_path}' must be defined as main path attachment",
+                         'suggestion': None})
+
     # Ensure trailing vim syntax
     if line:
         trailingSyntax = '# vim:syntax=apparmor\n'
@@ -450,10 +453,11 @@ def main(argv):
 
     profile_data = {}
     for path in sorted(profiles):
-        readApparmorFile_Out = readApparmorFile(path)
-        profilesInFile = readApparmorFile_Out[1]
-        messages.extend(readApparmorFile_Out[0])
-        profile_data.update(profilesInFile)
+        if not is_skippable_file(path):
+            readApparmorFile_Out = readApparmorFile(path)
+            profilesInFile = readApparmorFile_Out[1]
+            messages.extend(readApparmorFile_Out[0])
+            profile_data.update(profilesInFile)
 
     for m in messages:
         if m.get('suggestion'):