[Apparmor-general] Failed to change_hat to 'HANDLING_UNTRUSTED_INPUT'

[Christian Boltz]

Hello,

my Apache error log is flooded with error messages since I updated my 
server to openSUSE 10.2 :-(

[Tue Jan 23 20:42:41 2007] [error] Failed to change_hat 
to 'HANDLING_UNTRUSTED_INPUT'
[Tue Jan 23 20:45:05 2007] [error] Failed to change_hat 
to 'HANDLING_UNTRUSTED_INPUT'
[Tue Jan 23 20:45:05 2007] [error] Failed to change_hat 
to 'HANDLING_UNTRUSTED_INPUT'
(and many more of them - 14500 lines in 4 days)

Yes, the profile contains this hat, it is even in complain mode:

/usr/sbin/httpd2-prefork flags=(complain) {
  # [...]
  ^HANDLING_UNTRUSTED_INPUT flags=(complain) {
    #include <abstractions/nameservice>

    /**.htaccess r,
    /home/httpd/vhosts/*/statistics/logs/access_log w,
    /home/httpd/vhosts/*/statistics/logs/error_log w,
    /var/log/apache2/* w,
  }
  # [... several other hats, all in complain mode ...]
}

Any idea what could be wrong?

BTW: is it possible to have some hats in complain and some others in 
enforce mode?


Regards,

Christian Boltz
-- 
Linux - Life is too short for reboots