Public bug reported: Ubuntu 10.10 After installing apparmor-profiles package and adding my own two profiles for skype and opera, my /etc/apparmord/ looks like this:abstractions bin.ping cache disable force-complain home.wwwwww.apps.browsers.opera-11.00-1156.i386.linux.opera home.wwwwww.apps.skype_static-2.2.0.35.skype local program-chunks sbin.dhclient3 sbin.klogd sbin.syslogd sbin.syslog-ng tunables usr.bin.chromium-browser usr.bin.evince usr.bin.firefox usr.lib.dovecot.deliver usr.lib.dovecot.dovecot-auth usr.lib.dovecot.imap usr.lib.dovecot.imap-login usr.lib.dovecot.managesieve-login usr.lib.dovecot.pop3 usr.lib.dovecot.pop3-login usr.sbin.avahi-daemon usr.sbin.cupsd usr.sbin.dnsmasq usr.sbin.dovecot usr.sbin.identd usr.sbin.mdnsd usr.sbin.nmbd usr.sbin.nscd usr.sbin.smbd usr.sbin.tcpdump usr.sbin.traceroute
Yet upon startup, only 3 profiles get loaded, aa-status reports upon bootup: 3 profiles are loaded. 3 profiles are in enforce mode. /sbin/dhclient3 /usr/lib/NetworkManager/nm-dhcp-client.action /usr/lib/connman/scripts/dhclient-script 0 profiles are in complain mode. 0 processes have profiles defined. 0 processes are in enforce mode : 0 processes are in complain mode. 0 processes are unconfined but have a profile defined. And so I have to issue "/etc/init.d/apparmor reload" each time I boot which is patently not the proper way to load profiles at startup. Upon issuing this command, aa-status looks just like I expect: 38 profiles are loaded. 38 profiles are in enforce mode. /bin/ping /home/wwwwww/apps/browsers/opera-11.00-1156.i386.linux/opera /home/wwwwww/apps/skype_static-2.2.0.35/skype /sbin/dhclient3 /sbin/klogd /sbin/syslog-ng /sbin/syslogd /usr/bin/evince /usr/bin/evince-previewer /usr/bin/evince-thumbnailer /usr/lib/NetworkManager/nm-dhcp-client.action /usr/lib/chromium-browser/chromium-browser /usr/lib/chromium-browser/chromium-browser//browser_java /usr/lib/chromium-browser/chromium-browser//browser_openjdk /usr/lib/chromium-browser/chromium-browser//chromium_browser_sandbox /usr/lib/connman/scripts/dhclient-script /usr/lib/cups/backend/cups-pdf /usr/lib/dovecot/deliver /usr/lib/dovecot/dovecot-auth /usr/lib/dovecot/imap /usr/lib/dovecot/imap-login /usr/lib/dovecot/managesieve-login /usr/lib/dovecot/pop3 /usr/lib/dovecot/pop3-login /usr/lib/firefox-3.6.10/firefox-*bin /usr/lib/firefox-3.6.10/firefox-*bin//browser_java /usr/lib/firefox-3.6.10/firefox-*bin//browser_openjdk /usr/sbin/avahi-daemon /usr/sbin/cupsd /usr/sbin/dnsmasq /usr/sbin/dovecot /usr/sbin/identd /usr/sbin/mdnsd /usr/sbin/nmbd /usr/sbin/nscd /usr/sbin/smbd /usr/sbin/tcpdump /usr/sbin/traceroute 0 profiles are in complain mode. 0 processes have profiles defined. 0 processes are in enforce mode : 0 processes are in complain mode. 0 processes are unconfined but have a profile defined. So, why aren't the profiles loaded automatically on startup? ** Affects: apparmor (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/805731 Title: aa doesn't load profiles on startup To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/805731/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs