This patch fixes the init scripts helper functions file to
filter out the hat/child process separator as currently used
by the parser, '//' rather than what used to be used, the '^'
symbol. This fixes bugs where profiles that covered regexs (e.g.
'/usr/lib/firefox-4.0.1/firefox{,*[^s][^h]}') and thus were being
improperly filtered away and unloaded when reloading apparmor policy.
This commit is contained in:
Steve Beattie 2011-06-01 07:52:35 -07:00
parent 25f7aa6621
commit fdae9784f4

View file

@ -235,7 +235,7 @@ profiles_names_list() {
for profile in $PROFILE_DIR/*; do for profile in $PROFILE_DIR/*; do
if skip_profile "${profile}" && [ -f "${profile}" ] ; then if skip_profile "${profile}" && [ -f "${profile}" ] ; then
LIST_ADD=$($PARSER $ABSTRACTIONS -N "$profile" | grep -v '\^') LIST_ADD=$($PARSER $ABSTRACTIONS -N "$profile" | grep -v '//')
if [ $? -eq 0 ]; then if [ $? -eq 0 ]; then
echo "$LIST_ADD" >>$TMPFILE echo "$LIST_ADD" >>$TMPFILE
fi fi