One more apparmor config to add:
capability sys_admin,
** Tags added: sssd
** Tags added: apparmod
** Also affects: apparmor (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1421110
Title:
sssd missconfigured in apparamor profile
Status in apparmor package in Ubuntu:
New
Status in sssd package in Ubuntu:
New
Bug description:
After last update (11/2/2015) in my Ubuntu Server 14.04, i have my
syslog filled with repetition of apparmor messages (see below), adding
following lines in /etc/apparmor.d/usr.sbin.sssd help for some of the
messages (I investigate for last ones).
@{PROC}/[0-9]*/net/psched r,
/etc/libnl-3/classid r,
/usr/lib/x86_64-linux-gnu/samba/ldb/* m,
Feb 12 08:44:58 neobingo kernel: [172114.878569] type=1400
audit(1423727098.271:7774537): apparmor="STATUS" operation="profile_replace"
profile="unconfined" name="/usr/sbin/sssd" pid=31752 comm="apparmor_parser"
Feb 12 08:44:58 neobingo kernel: [172114.920422] type=1400
audit(1423727098.315:7774538): apparmor="ALLOWED" operation="open"
profile="/usr/sbin/sssd" name="/proc/31753/net/psched" pid=31753 comm="sssd"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Feb 12 08:44:58 neobingo kernel: [172114.920925] type=1400
audit(1423727098.315:7774539): apparmor="ALLOWED" operation="open"
profile="/usr/sbin/sssd" name="/etc/libnl-3/classid" pid=31753 comm="sssd"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Feb 12 08:44:58 neobingo kernel: [172114.921370] type=1400
audit(1423727098.315:7774540): apparmor="ALLOWED" operation="capable"
profile="/usr/sbin/sssd" pid=31753 comm="sssd" capability=21
capname="sys_admin"
Feb 12 08:44:58 neobingo kernel: [172114.932424] type=1400
audit(1423727098.327:7774541): apparmor="ALLOWED" operation="file_mmap"
profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/samba/ldb/acl.so"
pid=31753 comm="sssd" requested_mask="m" denied_mask=0
Feb 12 08:44:58 neobingo kernel: [172114.944467] type=1400
audit(1423727098.339:7774542): apparmor="ALLOWED" operation="file_mmap"
profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/samba/ldb/aclread.so"
pid=31753 comm="sssd" requested_mask="m" denied_m0
Feb 12 08:44:58 neobingo kernel: [172114.945151] type=1400
audit(1423727098.339:7774543): apparmor="ALLOWED" operation="file_mmap"
profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/samba/ldb/anr.so"
pid=31753 comm="sssd" requested_mask="m" denied_mask=0
Feb 12 08:44:58 neobingo kernel: [172114.945550] type=1400
audit(1423727098.339:7774544): apparmor="ALLOWED" operation="file_mmap"
profile="/usr/sbin/sssd"
name="/usr/lib/x86_64-linux-gnu/samba/ldb/descriptor.so" pid=31753 comm="sssd"
requested_mask="m" denie0
Feb 12 08:44:58 neobingo kernel: [172114.946220] type=1400
audit(1423727098.339:7774545): apparmor="ALLOWED" operation="file_mmap"
profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/samba/ldb/dirsync.so"
pid=31753 comm="sssd" requested_mask="m" denied_m0
Feb 12 08:44:58 neobingo kernel: [172114.946978] type=1400
audit(1423727098.339:7774546): apparmor="ALLOWED" operation="file_mmap"
profile="/usr/sbin/sssd"
name="/usr/lib/x86_64-linux-gnu/samba/ldb/extended_dn_in.so" pid=31753
comm="sssd" requested_mask="m" d0
Feb 12 08:44:59 neobingo kernel: [172115.667342] init: sssd main process
(31753) terminated with status 4
Feb 12 08:44:59 neobingo kernel: [172115.667360] init: sssd main process
ended, respawning
Feb 12 08:45:00 neobingo kernel: [172116.761986] init: sssd main process
(31761) terminated with status 4
Feb 12 08:45:00 neobingo kernel: [172116.762004] init: sssd main process
ended, respawning
Feb 12 08:45:01 neobingo kernel: [172117.807237] init: sssd main process
(31769) terminated with status 4
Feb 12 08:45:01 neobingo kernel: [172117.807256] init: sssd main process
ended, respawning
Feb 12 08:45:02 neobingo kernel: [172118.932187] init: sssd main process
(31777) terminated with status 4
Feb 12 08:45:02 neobingo kernel: [172118.932210] init: sssd main process
ended, respawning
Feb 12 08:45:03 neobingo kernel: [172119.994233] init: sssd main process
(31785) terminated with status 4
Feb 12 08:45:03 neobingo kernel: [172119.994246] init: sssd main process
ended, respawning
Feb 12 08:45:03 neobingo kernel: [172120.213741] audit_printk_skb: 630
callbacks suppressed
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1421110/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
