Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

When Attempting to Enforce Profiles Receiving Errror - Invalid or unknown keywords in mqueue r type=posix / #626

Closed
mcertini opened this issue Dec 15, 2024 · 4 comments

Comments

@mcertini
Copy link

When attempting to enforce a number of apparmor profiles individually, I am noting the following error:

Invalid or unknown keywords in mqueue r type=posix /

I did a search of the error through a couple of AI tools and attempted to change the syntax where I noted mqueue, but I have not been successful with this approach. I have not made any changes to the existing profiles. This error is occuring on Ubuntu Server 24.04.

Any guidance would be greatly appreciated.

@nobody43
Copy link
Contributor

What commands are you using?
FYI: aa-complain and aa-enforce has been out of date for many years.
For enforcing/complaining the profiles you have to manually change the flags/remove/add the symlinks in the file and run systemctl restart apparmor.
Or run apparmor_parser --add /etc/apparmor.d/file if flags are already clear.

@roddhjav Is quick reimplemetaion of these commands needed in the future?

@roddhjav
Copy link
Owner

roddhjav commented Dec 23, 2024

@nobody43 fixing the commands upstream would be better than reinventing them. It only takes time, that I currently don't have...

@nobody43
Copy link
Contributor

Fixing upstream will take too much time - the code is too tightly coupled. The fact that author himself couldn't fix it in years is giving me ideas. Besides, he have some plans on fixing the issue, and I don't want to step in his way.

@roddhjav
Copy link
Owner

Currently, there is nothing I can do on apparmor.d's side to fix this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants