[Apparmor-dev] [Bug 310260] New: AppArmor parser error CAP_INVALID-CAPABILITY

[bugzilla_noreply at novell.com]

https://bugzilla.novell.com/show_bug.cgi?id=310260

           Summary: AppArmor parser error CAP_INVALID-CAPABILITY
           Product: openSUSE 10.2
           Version: Final
          Platform: i586
        OS/Version: openSUSE 10.2
            Status: NEW
          Keywords: security_vulnerability
          Severity: Critical
          Priority: P5 - None
         Component: AppArmor
        AssignedTo: apparmor-dev at forge.novell.com
        ReportedBy: plaugraud at a1.net
         QAContact: dreynolds at novell.com
          Found By: ---


The Update Profile Wizard shows an "invalid-capability" like:
-----
Profil  /usr/sbin/sshd  [or] /opt/kde3/bin/kdm
Funktion  invalid-capability
Sicherheit  unexpected capability rank input: CAP_INVALID-CAPABILITY
-----

If you say "allow" after then in the profile is stored the following statement:
"capability invalid-capability,"

After reloading AppArmor the parser runs in an error:
-----
b2bserver1:~ # rcapparmor reload
Reloading AppArmor profiles AppArmor parser error in
/etc/apparmor.d/usr.sbin.sshd at line 425: Found unexpected keyword: 'invalid'
 Profile /etc/apparmor.d/usr.sbin.sshd failed to load
                                                                      failed
-----


-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.