Package: gpsd
Version: 3.22-2
Severity: important
Tags: patch
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Starting gps leads to the following apparmor error:
Feb 7 14:18:48 jadzia gpsd: gpsd:ERROR: Cannot create PID file:
/run/gpsd/gpsd.pid.
Feb 7 14:18:48 jadzia kernel: [136521.427769] kauditd_printk_skb: 12 callbacks
suppressed
Feb 7 14:18:48 jadzia kernel: [136521.427772] audit: type=1400
audit(1612703928.422:236): apparmor="DENIED" operation="mknod"
profile="/usr/sbin/gpsd" name="/run/gpsd/gpsd.pid" pid=27553 comm="gpsd"
requested_mask="c" denied_mask="c" fsuid=0 ouid=0
Adding something like
/{,var/}run/gpsd/gpsd.pid w,
to the usr.sbin.gpsd apparmor profile seems to do the trick.
Cheers,
gregor
- -- System Information:
Debian Release: bullseye/sid
APT prefers unstable
APT policy: (990, 'unstable'), (500, 'unstable-debug'), (500,
'oldoldstable'), (500, 'experimental'), (500, 'testing'), (500, 'stable'),
(500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.10.0-3-amd64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=C, LC_CTYPE=de_AT.utf8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/bash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled
Versions of packages gpsd depends on:
ii adduser 3.118
ii libbluetooth3 5.55-3
ii libc6 2.31-9
ii libdbus-1-3 1.12.20-1
ii libgps28 3.22-2
ii libusb-1.0-0 2:1.0.24-2
ii lsb-base 11.1.0
ii netbase 6.2
ii python3 3.9.1-1
Versions of packages gpsd recommends:
pn gpsd-tools <none>
ii udev 247.3-1
Versions of packages gpsd suggests:
ii apparmor 2.13.6-9
ii dbus 1.12.20-1
pn gpsd-clients <none>
- -- Configuration Files:
/etc/default/gpsd changed [not included]
- -- debconf information excluded
-----BEGIN PGP SIGNATURE-----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=5Yka
-----END PGP SIGNATURE-----
