Your message dated Sun, 27 Jan 2019 16:40:23 +0000 with message-id <e1gnntr-0003ww...@fasolo.debian.org> and subject line Bug#912587: fixed in firejail 0.9.58-1 has caused the Debian Bug report #912587, regarding firejail AppArmor profile blocks Chromium's usage of ptrace => large amounts of denial logged to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 912587: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=912587 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: apparmor Severity: important Dear Maintainer, when apparmor is installed, it emits an incredible amount of logs on dmesg, causing actual important stuff from the kernel to be missed. By incredible amount I mean that it fills completely the ring buffer with crap. Should it even be logging on dmesg? Imagine dmesg, only filled of this: [299560.719237] audit: type=1400 audit(1541071734.314:10526): apparmor="DENIED" operation="ptrace" profile="firejail-default" pid=13691 comm="TaskSchedulerSi" requested_mask="read" denied_mask="read" peer="firejail-default" [299560.719241] audit: type=1400 audit(1541071734.314:10527): apparmor="DENIED" operation="ptrace" profile="firejail-default" pid=13691 comm="TaskSchedulerSi" requested_mask="readby" denied_mask="readby" peer="firejail-default" [299560.921678] audit: type=1400 audit(1541071734.518:10528): apparmor="DENIED" operation="ptrace" profile="firejail-default" pid=13691 comm="TaskSchedulerSi" requested_mask="read" denied_mask="read" peer="firejail-default" For now my solution is to remove apparmor, but it gets sometimes pulled in again by other things. Best -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.18.0-2-amd64 (SMP w/4 CPU cores) Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to it_IT.UTF-8), LANGUAGE=it (charmap=UTF-8) (ignored: LC_ALL set to it_IT.UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system)
--- End Message ---
--- Begin Message ---Source: firejail Source-Version: 0.9.58-1 We believe that the bug you reported is fixed in the latest version of firejail, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 912...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Reiner Herrmann <rei...@reiner-h.de> (supplier of updated firejail package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 27 Jan 2019 17:09:49 +0100 Source: firejail Architecture: source Version: 0.9.58-1 Distribution: unstable Urgency: medium Maintainer: Reiner Herrmann <rei...@reiner-h.de> Changed-By: Reiner Herrmann <rei...@reiner-h.de> Closes: 912587 916920 Changes: firejail (0.9.58-1) unstable; urgency=medium . * New upstream release. * Mark github-desktop.profile as moved conffile. * Allow ptrace read/readby requests in AppArmor profile. Thanks to Salvo Tomaselli for the report and intrigeri for help with AppArmor. (Closes: #912587) * Restrict networking feature by default in firejail.config, as a new network namespace can circumvent packet filter of default namespace. Thanks to Alain Ducharme for the report. (Closes: #916920) Checksums-Sha1: f145c06ff7c47a08300f4fc77187f22bf2a314a5 2456 firejail_0.9.58-1.dsc 707a723328c1f70eef4a6be8e7ebd4ed62383e1c 337708 firejail_0.9.58.orig.tar.xz 8bcdc81eea3ccbef06b0a1026da64f832d7a8bb2 488 firejail_0.9.58.orig.tar.xz.asc 344c060cb5e66b814a2a0d0c790edcc13b5847a8 11340 firejail_0.9.58-1.debian.tar.xz 20240d9fe6617349a16a24b5612f1e249a5fc647 5483 firejail_0.9.58-1_source.buildinfo Checksums-Sha256: 8c7c054aaf3c2a0b315b004ab70d693b632d6360fa46972fb07b87c7f3c3a123 2456 firejail_0.9.58-1.dsc 2f6fcb58e2544d647b4ec28275ffd5e94f677dfd2ead9acaa17efe6e8567bf7b 337708 firejail_0.9.58.orig.tar.xz 113529da4e4760eaece11b60774a5348261ff57dfc337c5a8ac6a74d7d904fb2 488 firejail_0.9.58.orig.tar.xz.asc 2edb01d4c2899bb66a76e8d9eb7841a9ff0ac44b3fe07e11ae438e843687a598 11340 firejail_0.9.58-1.debian.tar.xz beb9d8e5cc73e84d1384342c5e547607b7d3a83e6de13237481ea12bf5b1c579 5483 firejail_0.9.58-1_source.buildinfo Files: d4f7a4e1d0545f9b607c9a7e529c449e 2456 utils optional firejail_0.9.58-1.dsc 55d71047856a6f7ed8220e3db8d9eb25 337708 utils optional firejail_0.9.58.orig.tar.xz e3c894226472f6df6dc34322ef176c7d 488 utils optional firejail_0.9.58.orig.tar.xz.asc 75896ada6b72e9860a9e45f194ca41d1 11340 utils optional firejail_0.9.58-1.debian.tar.xz 5662ec12a335de03b7c77e415177af36 5483 utils optional firejail_0.9.58-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2Pb6feok2Q1urHM7zPBJKNsO6qcFAlxN2AEACgkQzPBJKNsO 6qc13Q//WM++LeEUok1XnJddSCJQwo1kCIR26dL5TcOF16vo23PMgxBf1NHqeymb SceJOr+2Gt0X5O7WbgM6LRRzfH+OgSdvDaXHv7+ETWKf76KMKv/uKgsRq3LxVNd1 AbnbiywifDz+6xYONpuMa5gFCZ+MAX1OrGIgpvLylqKVweYukdomGZ9CqYbbXuRM aw1616of0+WRnf2oBV7LXB3PAzyDLqI07NuNeusfGueXan3YbEuTJpM9FPKtKKuH SpkPnuAxXs/YyUrCSWuVhPYfTkSszXMh8SFHD5zz22sXe/wNFBwK+5MvYQvsgMlQ QujYqtFcLcbbf0h2dufBM+SGT9yvDkhrw/GyKQ+apcg7IXTbuDmM7t9H7hiFoM3V LCqEA9Lg1/zDZsJ4ZhnZauY05BUuWSte+VVmiWlFZ8MmHn7IsH9jgxWh5Ib/yp89 /w/PbttLVio5Gyqkr9Anl3iDr53ynlJPs1kFduX19AgV3U4gsRgg2KceWa2V1Zi9 R5l1Y6ix5KooBHkTtIcQdXUtxkMx9+fY3NOU5RuKQsrpagvSLjAGDXKExX3G6/uA KAEtMWkL1Pv9A7mjo82v8OxNWxAHASxgJS5Hr4vh6guUr2QAbg84BN8qfXT+clN6 LtnQL92ON5T8f4VzWJZ23WHBOmvIEk70NOLmHYGIBWqj5V5IXhA= =L8vV -----END PGP SIGNATURE-----
--- End Message ---
