[prev in list] [next in list] [prev in thread] [next in thread] 

List:       apparmor-dev
Subject:    [apparmor] Bug: rcapparmor reload returns "done" even on profile syntax errors
From:       Christian Boltz <apparmor () cboltz ! de>
Date:       2012-03-26 18:20:20
Message-ID: 1566417.PdKhuygKno () tux ! boltz ! de ! vu
[Download RAW message or body]

Hello,

I just noticed that rcapparmor reload returns a green "done" ($? = 0) 
even if a profile has syntax errors:

# /etc/init.d/boot.apparmor reload x
Restarting AppArmor AppArmor parser error for /etc/apparmor.d/usr.sbin.winbindd in \
/etc/apparmor.d/usr.sbin.winbindd at line 10: syntax error, unexpected TOK_ID, \
expecting TOK_MODE

/etc/apparmor.d/usr.sbin.winbindd failed to load                                      \
failed AppArmor parser error for /etc/apparmor.d/usr.sbin.winbindd in \
/etc/apparmor.d/usr.sbin.winbindd at line 10: syntax error, unexpected TOK_ID, \
                expecting TOK_MODE
                                                                                      \
done

I added the "x" after reload to skip the redirect to systemd/systemctl.
With systemctl, only the exitcode is honored and the output hidden -
which means the profile is not loaded, but nobody sees an error message.

Expected result: a red "failed" and $? != 0

(AppArmor 2.7.2 on openSUSE 12.1 - but I'm quite sure trunk shares this 
bug.)


Regards,

Christian Boltz
-- 
> Ich werde gerne als Frau Fischer angesprochen, Herr Fischer macht
> sich da nicht so gut.
Warum denn nicht. Vielleicht kannst Du dann ja mit der
Flugbereitschaft der Bundeswehr auf die Melediven fliegen ;o)
[> Helga Fischer und Thorsten Körner in suse-linux]


-- 
AppArmor mailing list
AppArmor@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor


[prev in list] [next in list] [prev in thread] [next in thread]