Too bad, there's no "denied" messages in syslog Not with aa-enforce or aa-complain.
Also, I'm running old version of libicuXX.so.VERSION (Arch Linux) On Tue, May 6, 2014 at 1:38 PM, Seth Arnold <[email protected]> wrote: > On Tue, May 06, 2014 at 08:40:09AM +0800, Aaron Lewis wrote: >> >> %> cat /opt/chromium/chromium/chromium.sh >> #!/bin/bash >> >> export LD_LIBRARY_PATH=/opt/chromium/libs/ >> /opt/chromium/chromium/chromium "$@" >> >> When I enforce the opt.chromium.chromium.chromium.sh policy, it says: >> (No problem running it if aa is diabled) >> %> /opt/chromium/chromium/chromium.sh >> /opt/chromium/chromium/chromium: error while loading shared libraries: >> libicui18n.so.52: cannot open shared object file: No such file or >> directory >> >> But I already have: "/opt/chromium/libs/* rm," in that profile, anything >> wrong? >> >> That profile is for "/opt/chromium/chromium/chromium", not the script though > > LD_LIBRARY_PATH adds to the library path, it doesn't replace it entirely; > on my system, this library is in /usr/lib/x86_64-linux-gnu/libicui18n.so.52.1 > > Does this library exist in /opt/chromium/libs/ or elsewhere in a path > referenced via /etc/ld.so.conf or one of ld.so's defaults? > Does your profile allow 'rm' access to this library? > > Hopefully your system logs will contain more information; if not in > /var/log/syslog then perhaps in /var/log/audit/audit.log. > > Thanks > > -- > AppArmor mailing list > [email protected] > Modify settings or unsubscribe at: > https://lists.ubuntu.com/mailman/listinfo/apparmor > -- Best Regards, Aaron Lewis - PGP: 0x13714D33 - http://pgp.mit.edu/ Finger Print: 9F67 391B B770 8FF6 99DC D92D 87F6 2602 1371 4D33 -- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
