Policy cache file mtimes are not being set correctly

Bug #1484178 reported by Tyler Hicks
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
AppArmor
Fix Released
Critical
Tyler Hicks
apparmor (Ubuntu)
Fix Released
Critical
Jamie Strandboge

Bug Description

Oliver Grawert (ogra) reported that Ubuntu Touch image builds were failing due to incorrect timestamps on pre-compiled policy cache files.

Starting in AppArmor 2.10, the policy cache file's mtime was meant to be updated to be equal to the newest mtime detected
on the profile and abstraction files used to generate the policy cache file:

  http://bazaar.launchpad.net/~apparmor-dev/apparmor/master/revision/3079

That change was not correct and resulted in the mtime of the policy cache file to either not be updated (equal to the policy cache file creation time) or to be updated to an incorrect time.

Tyler Hicks (tyhicks)
Changed in apparmor (Ubuntu):
importance: Undecided → Critical
status: New → Confirmed
Revision history for this message
Tyler Hicks (tyhicks) wrote :

Fixed with r3220

Changed in apparmor:
status: In Progress → Fix Committed
Tyler Hicks (tyhicks)
Changed in apparmor (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package apparmor - 2.10-0ubuntu3

---------------
apparmor (2.10-0ubuntu3) wily; urgency=medium

  * debian/patches/parser-fix-cache-file-mtime-regression.patch: Fix a bug
    that resulted in the mtime of generate policy cache files to be set
    incorrectly. The mtime of cache files should be the newest mtime detected
    on the profile and abstraction files used to generate the policy cache
    file. However, the bug caused the mtime of the policy cache file to either
    not be updated or to be updated to an incorrect time. (LP: #1484178)
  * debian/patches/parser-verify-cache-file-mtime.patch: Add tests to verify
    that the policy cache file's mtime is being set correctly and that cache
    handling is correct when the profile or abstraction files are newer than
    the policy cache file.
  * debian/patches/parser-run-caching-tests-without-apparmorfs.patch,
    debian/patches/parser-do-cleanup-when-test-was-skipped.patch: Enable the
    caching tests to run on the buildds even though apparmorfs isn't mounted.

 -- Tyler Hicks <email address hidden> Wed, 12 Aug 2015 13:01:56 -0500

Changed in apparmor (Ubuntu):
status: Confirmed → Fix Released
Revision history for this message
Christian Boltz (cboltz) wrote :

This was already fixed in AppArmor 2.10.1

Changed in apparmor:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.