On Thu, 2016-01-21 at 12:57 +0100, daniel curtis wrote:
> 
> > > A rule which should not create a DENIED entries in a log file
> owner @{PROC}/sys/kernel/random/uuid    r,
> 
If you remove 'owner', this should go away. Notice it is root owned:

$ ls -l /proc/sys/kernel/random/uuid 
-r--r--r-- 1 root root 0 Jan 21 08:45 /proc/sys/kernel/random/uuid

The denial in your logs will have mentioned something like: 'fsuid=1000
ouid=0' which indicates the issue. See man apparmor.d (look for fsuid)
for details.

-- 
Jamie Strandboge             | http://www.canonical.com

Attachment: signature.asc
Description: This is a digitally signed message part

-- 
AppArmor mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/apparmor

Reply via email to