Hello, $subject.
These files are needed for disk-based buffering (added in syslog-ng 3.8). This was reported to me by Peter Czanik, one of the syslog-ng developers. Note: I'm not sure about adding @{CHROOT_BASE} to this rule, so for now I prefer not to do it - adding it later is easy, but finding out if it could be removed is hard ;-) I propose this patch for trunk, 2.10 and 2.9. [ syslog-ng-qf.diff ] === modified file 'profiles/apparmor.d/sbin.syslog-ng' --- profiles/apparmor.d/sbin.syslog-ng 2015-11-11 15:44:47 +0000 +++ profiles/apparmor.d/sbin.syslog-ng 2016-10-13 10:26:38 +0000 @@ -48,6 +48,7 @@ /{usr/,}sbin/syslog-ng mr, /sys/devices/system/cpu/online r, /usr/share/syslog-ng/** r, + /var/lib/syslog-ng/syslog-ng-?????.qf rw, # chrooted applications @{CHROOT_BASE}/var/lib/*/dev/log w, @{CHROOT_BASE}/var/lib/syslog-ng/syslog-ng.persist* rw, Regards, Christian Boltz -- >>Das dich das überrascht, überrascht mich jetzt aber :-) > Das überrascht mich aber durchaus. Überraschend. [>> René Falk, > Ratti und Arno Lehmann in suse-linux]
signature.asc
Description: This is a digitally signed message part.
-- AppArmor mailing list AppArmor@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor