[pkg-apparmor] Bug#1003158: apparmor: tunables/home seems to have wrong order of variables

[Christian Boltz]

Hello,

Am Freitag, 7. Januar 2022, 20:27:59 CET schrieb Karsten Hilbert:
> 	root at pireus:/etc/apparmor.d# aa-complain 
usr.bin.akonadiserver
> 
> 	ERROR: Values added to a non-existing variable @{HOME}:
> /mnt/SEAGATE-DM010-1TB/home.ncq/ /mnt/SEAGATE-DM010-1TB/home.brulefa/
> in tunables/home.d/site.local root at pireus:/etc/apparmor.d#
> 
> I can't figure out why this happens.

I'm afraid this is a known bug in the aa-* tools up to 2.13.x - if you 
define a variable in one file, and add to it in another (included) file, 
you'll get this error.

3.0 and newer have this bug fixed, but unfortunately the fix was a big 
rewrite of how variables are handled in the aa-* tools, therefore 
backporting the fix is close to impossible.

In 2.13.x and older, the workaround is to extend the variable directly 
in tunables/home instead of using a file in tunables/home.d/.


Regards,

Christian Boltz
-- 
Only wimps use tape backup: _real_ men just upload their important stuff
on ftp, and let the rest of the world mirror it ;)  [Linus Torvalds]
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL: <http://alioth-lists.debian.net/pipermail/pkg-apparmor-team/attachments/20220115/35468146/attachment.sig>