apparmor/libraries/libapparmor
Georgia Garcia 8e74855531 Merge Handle mount events/log entries without class
audit.log entries for mount events don't always include `class=mount`,
but can still be the base for mount rules.

Change logparser.py to also consider `operation=mount` as a mount event.

Actually we already had such a log and profile in our collection
(testcase_mount_01), but since it existed years before MountRule was
implemented, it was excluded in test-libapparmor-test_multi.py.
Therefore we didn't notice that it failed to produce a profile rule when
MountRule was introduced.

Remove testcase_mount_01 from the list of known failures so that it gets
tested - and fix the syntax error in the hand-written
testcase_mount_01.profile.

Also add testcase_mount_02 which is a mount event without fstype,
srcname and class.

I propose this fix for 4.0 and master.

MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/1229
Approved-by: Georgia Garcia <georgia.garcia@canonical.com>
Merged-by: Georgia Garcia <georgia.garcia@canonical.com>


(cherry picked from commit 48a936e985)

b475ed0d Handle mount events/log entries without class

Co-authored-by: Georgia Garcia <georgia.garcia@canonical.com>
2024-05-10 12:31:41 +00:00
..
doc Merge doc(fix): Fix wrong syntax for profile stacking 2024-01-30 09:45:36 +00:00
include Merge aa-load 2023-06-29 21:24:25 +00:00
m4 replace deprecated distutils with setuptools 2021-11-11 20:23:35 -03:00
src Prepare for AppArmor 4.0 beta1 release 2024-02-29 19:24:53 -03:00
swig Change string formatting method in Python tests 2023-02-19 16:54:38 -05:00
testsuite Merge Handle mount events/log entries without class 2024-05-10 12:31:41 +00:00
AUTHORS libraries/libapparmor/: more license cleanups, adjust my email address 2011-02-23 14:02:45 -08:00
autogen.sh libapparmor: Force libtoolize to replace existing files 2016-09-14 12:48:58 -05:00
ChangeLog move libapparmor into the libraries directory 2008-05-19 22:48:31 +00:00
configure.ac libraries/libapparmor: fix syntax in configure 2024-03-15 02:36:12 +00:00
COPYING.LGPL move libapparmor into the libraries directory 2008-05-19 22:48:31 +00:00
INSTALL move libapparmor into the libraries directory 2008-05-19 22:48:31 +00:00
Makefile.am libapparmor: more Makefile cleanups 2015-01-26 15:39:10 -08:00
NEWS move libapparmor into the libraries directory 2008-05-19 22:48:31 +00:00
README docs: update documentation to point bug reporting to gitlab 2020-05-05 00:10:53 -07:00

What little documentation exists is in include/aalogparse.h.

Please file bugs using https://gitlab.com/apparmor/apparmor/-/issues