[pkg-apparmor] Bug#1100583: apparmor-utils: aa-enforce can "corrupt" profile producing "Multiple definitions" error

Vincas Dargis vindrg at gmail.com
Sat Mar 15 18:19:48 GMT 2025


Package: apparmor-utils
Version: 4.1.0~beta5-3
Severity: normal
Tags: upstream

Dear Maintainer,

For some reason aa-enforce can convert child profile "profile foo//bar {
... }" into "profile foo { } " which produces "Multiple definitions"
error, resulting in profile not being loaded.

Uptream issue: https://gitlab.com/apparmor/apparmor/-/issues/493

-- System Information:
Debian Release: trixie/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.12.17-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=lt_LT.UTF-8, LC_CTYPE=lt_LT.UTF-8 (charmap=UTF-8), LANGUAGE=lt
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages apparmor-utils depends on:
ii  apparmor          4.1.0~beta5-3
ii  python3           3.13.2-2
ii  python3-apparmor  4.1.0~beta5-3

apparmor-utils recommends no packages.

Versions of packages apparmor-utils suggests:
pn  vim-addon-manager  <none>

-- no debconf information



More information about the pkg-apparmor-team mailing list