[Bug 1416039] [NEW] Broken apparmor profile

2015-01-30 Thread Launchpad Bug Tracker
You have been subscribed to a public bug by Robie Basak (racb):

I enabled apparmor profile for squid3 by removing symlink in
/etc/apparmor.d/disable

This broke squid, even squid3 -z was failing with:
assertion failed: Kid.cc:39: cpid  0

and I saw the following apparmor message:
apparmor=DENIED operation=exec profile=/usr/sbin/squid3 
name=/usr/sbin/squid3 pid=23413 comm=squid3 requested_mask=x 
denied_mask=x fsuid=0 ouid=0

This can be worked around by adding the following line to 
/etc/apparmor.d/usr.sbin.squid3:
/usr/sbin/squid3 ix,

** Affects: squid3 (Ubuntu)
 Importance: Undecided
 Status: Confirmed

-- 
Broken apparmor profile
https://bugs.launchpad.net/bugs/1416039
You received this bug notification because you are a member of Ubuntu Server 
Team, which is subscribed to the bug report.

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 1416039] [NEW] Broken apparmor profile

2015-01-29 Thread Jacek Nykis
Public bug reported:

I enabled apparmor profile for squid3 by removing symlink in
/etc/apparmor.d/disable

This broke squid, even squid3 -z was failing with:
assertion failed: Kid.cc:39: cpid  0

and I saw the following apparmor message:
apparmor=DENIED operation=exec profile=/usr/sbin/squid3 
name=/usr/sbin/squid3 pid=23413 comm=squid3 requested_mask=x 
denied_mask=x fsuid=0 ouid=0

This can be worked around by adding the following line to 
/etc/apparmor.d/usr.sbin.squid3:
/usr/sbin/squid3 ix,

** Affects: squid3 (Ubuntu)
 Importance: Undecided
 Status: Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to squid3 in Ubuntu.
https://bugs.launchpad.net/bugs/1416039

Title:
  Broken apparmor profile

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/squid3/+bug/1416039/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs