On Sun, Dec 11, 2016 at 07:08:45PM +0100, daniel curtis wrote: > Today, I've noticed that two files from /var/log/ directory: kern.log and > syslog were empty - nothing logged (0 bytes) and another two: kern.log.1 > and syslog.1 - with logged messages. Strange. I decided to check, for > example, kern.log.1 file and see whats happened. Here's what I've found: > [...] > According to above messages I would like to ask about rules, which are > needed in the logrotate profile. In my opinion, they could/should looks > like: > > capability fsetid, > > /sbin/initctl mrix, > /sbin/runlevel mrix, > > /etc/lsb-base-logging.sh r,
This is strange; I'm surprised these weren't discovered earlier. I think you could use Ux rules for these commands. I don't know why logrotate needs them, but depending upon what they do with init, you could drag in a huge amount of privileges to this profile that logically belong to upstart instead. So I'd add: /sbin/initctl Ux, /sbin/runlevel Ux, Thanks
signature.asc
Description: PGP signature
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
