On Sun, May 12, 2019 at 08:52:20PM +0900, hoxp18 wrote:
> Dear maintainers,
>
> I forgot to add the sample log. Apology.
>
> kernel: [ sec] audit: type=1400 audit(XXXXXXXXX.YYY:ZZZ):
> apparmor="DENIED" operation="mknod"
> profile="/usr/share/firefox-esr/firefox-esr"
> name="/usr/share/firefox-esr/fonts/.uuid.TMP-RANDOM"
> pid=PID comm=("firefox-esr"|[:digits:])
> requested_mask="c" denied_mask="c" fsuid=UID ouid=UID
>
> This is after I mkdir /usr/share/firefox-esr/fonts.
>
> kernel: [ sec] audit: type=1400 audit(XXXXXXXXX.YYY:ZZZ):
> apparmor="DENIED" operation="mknod"
> profile="/usr/lib/firefox-esr/firefox-esr"
> name="/usr/lib/firefox-esr/fonts/.uuid.TMP-RANDOM"
> pid=PID comm=("firefox-esr"|[:digits:])
> requested_mask="c" denied_mask="c" fsuid=UID ouid=UID
It would be useful to have stack traces for these operations to see
where they come from.
Mike
