sles, thanks for the excellent reproducer.
Christian, I'd love the 'magic' version:
> b) when adding an include, check if all variables are defined.
Of course the user interface might be a bit awkward, especially if the
intended use of the abstraction is for the profile author to provide the
For SLE - indeed, that sounds like a funny[tm] story...
> >declare this bugreport as user error - you broke it
>
> No, I didn't, not me shipped empty profile in mariadb-server package :-P
Well, but you added the empty
/usr/sbin/mysqld {
}
profile (see comment #6 step 2) to the
No, it was far before..., SLES8 or 9, I reported bug in xfs filesystem to
Novell which resulted in kernel crash, and to SGI, SGI fixed it :-),
I patched SUSE's kernel with SGI patch, compiled, and I informed Novell that
bug is fixed...
Then, after several weeks, Novell updated kernel- and-
Yes, I remember that Novell had the "great" idea to force a pre-alpha
package management ("Zenworks") into SLE (IIRC SLE 10) and openSUSE
10.1. On the positive side, they learned that this was a terrible idea,
and SUSE developed libzypp and zypper - which turned the Zenworks
desaster into the best
OK, here it is
1. sudo apt-get install mariadb-server
2. /usr/sbin/mysqld {
}
3. systemctl reload apparmor
4. systemctl start mysql
5. sudo aa-logprof
Reading log entries from /var/log/syslog.
Updating AppArmor profiles in /etc/apparmor.d.
Enforce-mode changes:
Profile: /usr/sbin/mysqld
well, about funny, I was first SLES user in my country, this is why I have such
nickname ;-)
but I don't use SUSE anylonger, since it was bought by Novell it became
nightmare.
Anyway, I'll try to reproduce it tomorrow and I'll provide you all step-
by-step info, or , may be even today- I use
I'm afraid this is _not_ easy to reproduce. (Well, the load failure when
tunables/global is missing probably is, but but we need to find out
_why_ tunables/global was missing in the profile.)
IIRC, you are the first one who noticed such a problem in all the years
I use and work on AppArmor. I
I created profile for mariadb , which is empty in Ubuntu 16.04 by using
aa-logprof,
just added path and complain flag to it, and, after aa-logprof suggested to
include includes like
abstractions/base I got above error.
I guess this is quite easy to reproduce...
Never had such problem before,
In theory, the tunables/global include should always be added - and in
practise it usually also is, because everything else would give us tons
of bugreports ;-)
Now the question is: How did you create that profile without
tunables/global - by using aa-genprof and/or aa-logprof, or was another
oops, forget to write:
and this aa-logprof behavior is , obviously, wrong and should be fixed,
imho.
thank you!
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1629203
Title:
aa-logprof does not
10 matches
Mail list logo
