base abstraction missing glibc /proc/$pid/ things
Bug #1658239 reported by
Kees Cook
This bug affects 4 people
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
AppArmor | Status tracked in Master | |||||
2.10 |
Fix Released
|
Undecided
|
Unassigned | |||
2.11 |
Fix Released
|
Undecided
|
Unassigned | |||
2.9 |
Fix Released
|
Undecided
|
Unassigned | |||
Master |
Fix Released
|
Undecided
|
Unassigned | |||
apparmor (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
There are yet more glibc-needed files missing from the base abstraction:
--- base 2017-01-20 15:37:50.000000000 -0800
+++ /etc/apparmor.
@@ -92,7 +92,7 @@
/sys/
# glibc's *printf protections read the maps file
- @{PROC}/@{pid}/maps r,
+ @{PROC}
# libgcrypt reads some flags from /proc
@{PROC}
To post a comment you must log in.
Committed revision 3626.
Committed revision 3382.
Committed revision 3047.
Thanks