Your message dated Mon, 15 Mar 2021 17:20:15 +0100
with message-id <[email protected]>
and subject line Re: Bug#982242: gpsd: apparmor denies creation of pid file
has caused the Debian Bug report #982242,
regarding gpsd: apparmor denies creation of pid file
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
982242: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982242
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: gpsd
Version: 3.22-2
Severity: important
Tags: patch

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Starting gps leads to the following apparmor error:

Feb  7 14:18:48 jadzia gpsd: gpsd:ERROR: Cannot create PID file: 
/run/gpsd/gpsd.pid.
Feb  7 14:18:48 jadzia kernel: [136521.427769] kauditd_printk_skb: 12 callbacks 
suppressed
Feb  7 14:18:48 jadzia kernel: [136521.427772] audit: type=1400 
audit(1612703928.422:236): apparmor="DENIED" operation="mknod" 
profile="/usr/sbin/gpsd" name="/run/gpsd/gpsd.pid" pid=27553 comm="gpsd" 
requested_mask="c" denied_mask="c" fsuid=0 ouid=0

Adding something like

/{,var/}run/gpsd/gpsd.pid w,

to the usr.sbin.gpsd apparmor profile seems to do the trick.

Cheers,
gregor


- -- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'unstable-debug'), (500, 
'oldoldstable'), (500, 'experimental'), (500, 'testing'), (500, 'stable'), 
(500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-3-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=C, LC_CTYPE=de_AT.utf8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages gpsd depends on:
ii  adduser        3.118
ii  libbluetooth3  5.55-3
ii  libc6          2.31-9
ii  libdbus-1-3    1.12.20-1
ii  libgps28       3.22-2
ii  libusb-1.0-0   2:1.0.24-2
ii  lsb-base       11.1.0
ii  netbase        6.2
ii  python3        3.9.1-1

Versions of packages gpsd recommends:
pn  gpsd-tools  <none>
ii  udev        247.3-1

Versions of packages gpsd suggests:
ii  apparmor      2.13.6-9
ii  dbus          1.12.20-1
pn  gpsd-clients  <none>

- -- Configuration Files:
/etc/default/gpsd changed [not included]

- -- debconf information excluded

-----BEGIN PGP SIGNATURE-----
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=5Yka
-----END PGP SIGNATURE-----

--- End Message ---
--- Begin Message ---
On Mon, 15 Mar 2021 00:50:17 +0100, Bernd Zeimetz wrote:

> the default configuration as shipped in the Debian package does not
> create a pid file as there is no need to do so.

You're right, and I apologize for not checking more thoroughly before
filing this bug report. Closing now.

Background story: The pid file is created by /etc/init.d/gpsd which
_was_ in the package and is not shipped anymore, and my Git history
shows that I've resurrected it manually.


Cheers,
gregor

-- 
 .''`.  https://info.comodo.priv.at -- Debian Developer https://www.debian.org
 : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D  85FA BB3A 6801 8649 AA06
 `. `'  Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
   `-   NP: Penelope Swales: Lost & Found

Attachment: signature.asc
Description: Digital Signature


--- End Message ---

Reply via email to