[Apparmor-dev] "Profile doesn't conform to protocol" error

[Andreas Hasenack]

Hi all,

we are attempting to have apparmor working with kernel 2.6.24rc8. The
first attempt was at grabbing SuSE's patches from factory.

So far we only managed to get it working with an MM kernel (2.6.24rc4mm1
+ apparmor patches). In the other (our 2.6.24rc8), the error message
while trying to load the profile is:

[root at localhost ~]# service apparmor restart
Reloading AppArmor profiles /sbin/apparmor_parser: Unable to replace
"/bin/netstat".  Profile doesn't conform to protocol
 Profile /etc/apparmor.d/bin.netstat failed to load
/sbin/apparmor_parser: Unable to replace "/bin/ping".  Profile doesn't
conform to protocol
 Profile /etc/apparmor.d/bin.ping failed to load

(...)

Does this signal some version problem between kernel level and user
level? Or is it something else? This happens with our 2.6.24rc8, which
has the (somewhat older it seems) SuSE patches and userlevel svn
revision 1076. The same profiles load fine with the 2.6.24rc4mm1 kernel.