On 2020-02-08 17:57, Aurelien Jarno wrote: > On 2019-11-30 16:00, André Rodier wrote: > > Package: nscd > > Version: 2.28-10 > > > > When using AppArmor and ldap for users database, and nscd on Debian, a > > lot of errors are visible in the AppArmor logs, when any program > > queries nscd. > > > > The nscd daemon tries to open files in "var/cache/nscd/..." instead of > > "/var/cache/nscd/...". Note the missing slash character at the > > beginning. AppArmor complains about the file access denied, but the > > error is really a missing '/' character in the path of the cache files. > > What makes you believe that? I have just tried with strace, and I see > the correct path with the leading '/': > > openat(AT_FDCWD, "/var/cache/nscd/passwd", O_RDWR|O_CLOEXEC) = 4 > openat(AT_FDCWD, "/var/cache/nscd/passwd", O_RDONLY|O_CLOEXEC) = 5 > openat(AT_FDCWD, "/var/cache/nscd/group", O_RDWR|O_CLOEXEC) = 6 > openat(AT_FDCWD, "/var/cache/nscd/group", O_RDONLY|O_CLOEXEC) = 7 > openat(AT_FDCWD, "/var/cache/nscd/hosts", O_RDWR|O_CLOEXEC) = 8 > openat(AT_FDCWD, "/var/cache/nscd/hosts", O_RDONLY|O_CLOEXEC) = 9 > openat(AT_FDCWD, "/var/cache/nscd/services", O_RDWR|O_CLOEXEC) = 10 > openat(AT_FDCWD, "/var/cache/nscd/services", O_RDONLY|O_CLOEXEC) = 11 > openat(AT_FDCWD, "/var/cache/nscd/netgroup", O_RDWR|O_CLOEXEC) = 12 > openat(AT_FDCWD, "/var/cache/nscd/netgroup", O_RDONLY|O_CLOEXEC) = 13
Any news about that? Regards, Aurelien -- Aurelien Jarno GPG: 4096R/1DDD8C9B aurel...@aurel32.net http://www.aurel32.net
