[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
I'm not sure if this is the reason why in the last update to dnsmasq it won't start during boot anymore. I have to restart the process after boot. -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
Jeremy, Are you getting AppArmor rejects? They should show up in the output of dmesg. Can you run apport-collect -p apparmor 445818 -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
I meant this update to apparmor stopped dnsmasq for me. -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
This bug was fixed in the package apparmor - 2.3.1+1403-0ubuntu27.2 --- apparmor (2.3.1+1403-0ubuntu27.2) karmic-proposed; urgency=low * usr.sbin.dnsmasq: fully address LP: #445818 - more pidfile refinements - allow access to /var/run/dnsmasq - allow access to /etc/dnsmasq.d - allow dac_override so it can write its pidfile -- Jamie Strandboge ja...@ubuntu.com Wed, 04 Nov 2009 13:16:21 -0600 ** Changed in: apparmor (Ubuntu Karmic) Status: Fix Committed = Fix Released -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
Accepted apparmor into karmic-proposed, the package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance! ** Changed in: apparmor (Ubuntu Karmic) Status: Fix Released = In Progress ** Changed in: apparmor (Ubuntu Karmic) Status: In Progress = Fix Committed -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
2.3.1+1403-0ubuntu27.2 allows dnsmasq to work via its initscript and the test case in comment #7. -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
** Tags added: verification-done ** Tags removed: verification-needed -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
This bug was fixed in the package apparmor - 2.3.1+1403-0ubuntu27.1 --- apparmor (2.3.1+1403-0ubuntu27.1) karmic-proposed; urgency=low [ Jamie Strandboge ] * abstractions/ubuntu-browsers: add opera and icecat (LP: #432778) * abstractions/ubuntu-browsers: add epiphany (epiphany-browser and epiphany-webkit were already present, but the recent changes in epiphany packaging require /usr/bin/epiphany) (LP: #472952) * usr.sbin.dnsmasq: allow pidfiles for /var/run/dnsmasq*.pid (LP: #445818) * abstractions/gnome: allow access to ~/.themes (LP: #460125) * abstractions/kde: allow access to /etc/kde4rc and /usr/bin/kde4-config (LP: #447006) [ Marc Deslauriers ] * utils/Subdomain.pm: don't skip reading profiles that are also in the cache directory (LP: #446449) * utils/Subdomain.pm: correctly parse PUxr modes * utils/Subdomain.pm: support include directories -- Jamie Strandboge ja...@ubuntu.com Tue, 03 Nov 2009 14:30:19 -0600 ** Changed in: apparmor (Ubuntu Karmic) Status: Fix Committed = Fix Released -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
** Branch linked: lp:ubuntu/apparmor -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
Updated test case: - apt-get install apparmor-profiles dnsmasq - enable the dnsmasq profile with 'aa-enforce /etc/apparmor.d/usr.sbin.dnsmasq' - sudo /usr/sbin/dnsmasq -x /var/run/dnsmasq/dnsmasq.pid -u dnsmasq -7 /etc/dnsmasq.d - sudo /usr/sbin/dnsmasq -x /var/run/nm-dnsmasq.wlan0.pid -u dnsmasq -7 /etc/dnsmasq.d While the profile addressed the original reporter's claim that /var/run/dsnmasq.wlan0.pid is the pid to look for, looking in the attached dmesg output and doing 'sudo /etc/init.d/dnsmasq start' showed additional locations for pidfiles and config files. The updated profile should have these additions: capability dac_override, /etc/dnsmasq.d/ r, /etc/dnsmasq.d/* r, /var/run/*dnsmasq*.pid w, /var/run/dnsmasq/ r, /var/run/dnsmasq/* rw, At present, the profile is useless without these additions, as dnsmasq won't even start when the profile is in enforce mode. -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
** Also affects: apparmor (Ubuntu Lucid) Importance: Low Assignee: Jamie Strandboge (jdstrand) Status: Fix Released ** Changed in: apparmor (Ubuntu Lucid) Status: Fix Released = In Progress -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
I uploaded 2.3.1+1403-0ubuntu27.2. See the attached debdiff between 2.3.1+1403-0ubuntu27.1 and 2.3.1+1403-0ubuntu27.2. ** Attachment added: apparmor_2.3.1+1403-0ubuntu27.2.debdiff http://launchpadlibrarian.net/35114834/apparmor_2.3.1%2B1403-0ubuntu27.2.debdiff ** Changed in: apparmor Status: Fix Committed = Fix Released -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
This bug was fixed in the package apparmor - 2.3.1+1403-0ubuntu29 --- apparmor (2.3.1+1403-0ubuntu29) lucid; urgency=low * parser/Makefile: generate af_names.h based on bits/socket.h since linux/socket.h no longer has what we need (LP: #474751) * usr.sbin.dnsmasq: fully address LP: #445818 - more pidfile refinements - allow access to /var/run/dnsmasq - allow access to /etc/dnsmasq.d - allow dac_override so it can write its pidfile -- Jamie Strandboge ja...@ubuntu.com Wed, 04 Nov 2009 17:07:23 -0600 ** Changed in: apparmor (Ubuntu Lucid) Status: In Progress = Fix Released -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
This bug was fixed in the package apparmor - 2.3.1+1403-0ubuntu28 --- apparmor (2.3.1+1403-0ubuntu28) lucid; urgency=low [ Jamie Strandboge ] * update skype profile in extras. Based on work by Андрей Калинин. (LP: #226624) * abstractions/ubuntu-browsers: add opera and icecat (LP: #432778) * abstractions/ubuntu-browsers: add epiphany (epiphany-browser and epiphany-webkit were already present, but the recent changes in epiphany packaging require /usr/bin/epiphany) (LP: #472952) * usr.sbin.dnsmasq: allow pidfiles for /var/run/dnsmasq*.pid (LP: #445818) * abstractions/gnome: allow access to ~/.themes (LP: #460125) * abstractions/kde: allow access to /etc/kde4rc and /usr/bin/kde4-config (LP: #447006) [ Marc Deslauriers ] * utils/Subdomain.pm: don't skip reading profiles that are also in the cache directory (LP: #446449) * utils/Subdomain.pm: correctly parse PUxr modes * utils/Subdomain.pm: support include directories -- Jamie Strandboge ja...@ubuntu.com Wed, 04 Nov 2009 11:02:27 -0600 ** Changed in: apparmor (Ubuntu) Status: Fix Committed = Fix Released -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
Can you add the following to your profile: /var/run/dnsmasq*.pid w, Then perform in a terminal: $ sudo apparmor_parser -r -T -W /etc/apparmor.d/usr.sbin.dnsmasq and report back if it fixes it for you? ** Also affects: apparmor Importance: Undecided Status: New ** Changed in: apparmor Status: New = Fix Committed ** Changed in: apparmor Assignee: (unassigned) = Jamie Strandboge (jdstrand) -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
** Tags added: apparmor -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
** Changed in: apparmor (Ubuntu) Importance: Undecided = Low ** Changed in: apparmor (Ubuntu) Status: New = Triaged -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 445818] Re: profile for usr.sbin.dnsmasq needs adjustment
** Attachment added: ApparmorPackages.txt http://launchpadlibrarian.net/33250621/ApparmorPackages.txt ** Attachment added: ApparmorStatusOutput.txt http://launchpadlibrarian.net/33250622/ApparmorStatusOutput.txt ** Attachment added: KernLog.txt http://launchpadlibrarian.net/33250623/KernLog.txt ** Attachment added: PstreeP.txt http://launchpadlibrarian.net/33250624/PstreeP.txt ** Attachment added: XsessionErrors.txt http://launchpadlibrarian.net/33250625/XsessionErrors.txt -- profile for usr.sbin.dnsmasq needs adjustment https://bugs.launchpad.net/bugs/445818 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
