Looking for some help with getting slapd to be able to connect to saslauthd 
inside an LXD container. Whenever slapd needs to connect to the socket I see 
the following error message in the host's kernel log:

    Jul  6 13:27:17 host kernel: [923413.078592] audit: type=1400 
audit(1594063637.667:51106): *apparmor="DENIED" operation="connect"* 
namespace="root//lxd-container1_<var-lib-lxd>" *profile="/usr/sbin/slapd" 
name="/run/saslauthd/mux"* pid=58517 comm="slapd" *requested_mask="wr"* 
denied_mask="wr" fsuid=10000111 ouid=10000000

I've added the following to the container config and restarted the container, 
but I'm still seeing the same problem:

    lxcuser@host:~$ lxc config get container1 raw.apparmor
    /run/saslauthd/mux wr,

I'm not super familiar with AppArmor and going through the docs now, but 
thought I'd ask to see if anybody can point me in the right direction.

    lxcuser@host:~$ lxd --version
    3.0.3
    lxcuser@host:~$ lsb_release -a
    No LSB modules are available.
    Distributor ID:    Ubuntu
    Description:    Ubuntu 18.04.4 LTS
    Release:    18.04
    Codename:    bionic

-- 
Thanks,
Joshua Schaeffer

_______________________________________________
lxc-users mailing list
lxc-users@lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-users

Reply via email to