[Apparmor-general] Failed to change_hat to 'HANDLING_UNTRUSTED_INPUT'

Seth Arnold seth.arnold at suse.de
Wed Jan 31 18:28:32 MST 2007


On Wed, Jan 31, 2007 at 02:58:53PM -0800, Crispin Cowan wrote:
> >> However, this magic cookie is seeded once-per-server,
> > Does once-per-server mean "per Apache server process" or "per machine"?
> I think "once per Apache server process" unless there is really weird
> threading going on.

In the prefork model, once per apache server process. Not sure about the
others. :)

> >> so the chances of hitting it would be quite low.
> >>     
> > The fact that I have seen the error message on two (of two tested) 
> > machines suggests that there must be another problem.
> > But there's still Murphy ;-)
> >   
> "Quite low" is 1 in 4 billion. Murphy could make me believe you saw it
> once, but not twice. You could plausibly see it in a stress test rig

This _is_ Christian :) he has a knack for finding bugs no one else can..
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://forge.novell.com/pipermail/apparmor-general/attachments/20070131/57d86cd6/attachment.pgp


More information about the Apparmor-general mailing list