Comment 1 for bug 1815295

Revision history for this message
Vincas Dargis (talkless) wrote :

Original issue actually is that aa-enforce does not like completely empty profile, like, with only comments, for example:

```
$ cat /etc/apparmor.d/foo ; sudo aa-enforce /etc/apparmor.d/*
# foo bar
Profile for /etc/apparmor.d/abstractions not found, skipping
Profile for /etc/apparmor.d/apache2.d not found, skipping
Setting /etc/apparmor.d/bin.ping to enforce mode.
Profile for /etc/apparmor.d/disable not found, skipping
Setting /etc/apparmor.d/foo to enforce mode.

ERROR: /etc/apparmor.d/foo doesn't contain a valid profile (syntax error?)
```

This was discovered with this empty mariadb-server-10.3 profile in Debian Sid:
https://sources.debian.org/src/mariadb-10.3/1:10.3.12-2/debian/apparmor-profile/