[Touch-packages] [Bug 1421110] Re: sssd missconfigured in apparamor profile

2015-04-02 Thread Timo Aaltonen
** No longer affects: apparmor (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1421110

Title:
  sssd missconfigured in apparamor profile

Status in sssd package in Ubuntu:
  New

Bug description:
  After last update (11/2/2015) in my Ubuntu Server 14.04, i have my
  syslog filled with repetition of apparmor messages (see below), adding
  following lines in /etc/apparmor.d/usr.sbin.sssd help for some of the
  messages (I investigate for last ones).

   @{PROC}/[0-9]*/net/psched r,
/etc/libnl-3/classid r,
/usr/lib/x86_64-linux-gnu/samba/ldb/* m,

  
  Feb 12 08:44:58 neobingo kernel: [172114.878569] type=1400 
audit(1423727098.271:7774537): apparmor=STATUS operation=profile_replace 
profile=unconfined name=/usr/sbin/sssd pid=31752 comm=apparmor_parser
  Feb 12 08:44:58 neobingo kernel: [172114.920422] type=1400 
audit(1423727098.315:7774538): apparmor=ALLOWED operation=open 
profile=/usr/sbin/sssd name=/proc/31753/net/psched pid=31753 comm=sssd 
requested_mask=r denied_mask=r fsuid=0 ouid=0
  Feb 12 08:44:58 neobingo kernel: [172114.920925] type=1400 
audit(1423727098.315:7774539): apparmor=ALLOWED operation=open 
profile=/usr/sbin/sssd name=/etc/libnl-3/classid pid=31753 comm=sssd 
requested_mask=r denied_mask=r fsuid=0 ouid=0
  Feb 12 08:44:58 neobingo kernel: [172114.921370] type=1400 
audit(1423727098.315:7774540): apparmor=ALLOWED operation=capable 
profile=/usr/sbin/sssd pid=31753 comm=sssd capability=21  
capname=sys_admin
  Feb 12 08:44:58 neobingo kernel: [172114.932424] type=1400 
audit(1423727098.327:7774541): apparmor=ALLOWED operation=file_mmap 
profile=/usr/sbin/sssd name=/usr/lib/x86_64-linux-gnu/samba/ldb/acl.so 
pid=31753 comm=sssd requested_mask=m denied_mask=0
  Feb 12 08:44:58 neobingo kernel: [172114.944467] type=1400 
audit(1423727098.339:7774542): apparmor=ALLOWED operation=file_mmap 
profile=/usr/sbin/sssd name=/usr/lib/x86_64-linux-gnu/samba/ldb/aclread.so 
pid=31753 comm=sssd requested_mask=m denied_m0
  Feb 12 08:44:58 neobingo kernel: [172114.945151] type=1400 
audit(1423727098.339:7774543): apparmor=ALLOWED operation=file_mmap 
profile=/usr/sbin/sssd name=/usr/lib/x86_64-linux-gnu/samba/ldb/anr.so 
pid=31753 comm=sssd requested_mask=m denied_mask=0
  Feb 12 08:44:58 neobingo kernel: [172114.945550] type=1400 
audit(1423727098.339:7774544): apparmor=ALLOWED operation=file_mmap 
profile=/usr/sbin/sssd 
name=/usr/lib/x86_64-linux-gnu/samba/ldb/descriptor.so pid=31753 comm=sssd 
requested_mask=m denie0
  Feb 12 08:44:58 neobingo kernel: [172114.946220] type=1400 
audit(1423727098.339:7774545): apparmor=ALLOWED operation=file_mmap 
profile=/usr/sbin/sssd name=/usr/lib/x86_64-linux-gnu/samba/ldb/dirsync.so 
pid=31753 comm=sssd requested_mask=m denied_m0
  Feb 12 08:44:58 neobingo kernel: [172114.946978] type=1400 
audit(1423727098.339:7774546): apparmor=ALLOWED operation=file_mmap 
profile=/usr/sbin/sssd 
name=/usr/lib/x86_64-linux-gnu/samba/ldb/extended_dn_in.so pid=31753 
comm=sssd requested_mask=m d0
  Feb 12 08:44:59 neobingo kernel: [172115.667342] init: sssd main process 
(31753) terminated with status 4
  Feb 12 08:44:59 neobingo kernel: [172115.667360] init: sssd main process 
ended, respawning
  Feb 12 08:45:00 neobingo kernel: [172116.761986] init: sssd main process 
(31761) terminated with status 4
  Feb 12 08:45:00 neobingo kernel: [172116.762004] init: sssd main process 
ended, respawning
  Feb 12 08:45:01 neobingo kernel: [172117.807237] init: sssd main process 
(31769) terminated with status 4
  Feb 12 08:45:01 neobingo kernel: [172117.807256] init: sssd main process 
ended, respawning
  Feb 12 08:45:02 neobingo kernel: [172118.932187] init: sssd main process 
(31777) terminated with status 4
  Feb 12 08:45:02 neobingo kernel: [172118.932210] init: sssd main process 
ended, respawning
  Feb 12 08:45:03 neobingo kernel: [172119.994233] init: sssd main process 
(31785) terminated with status 4
  Feb 12 08:45:03 neobingo kernel: [172119.994246] init: sssd main process 
ended, respawning
  Feb 12 08:45:03 neobingo kernel: [172120.213741] audit_printk_skb: 630 
callbacks suppressed

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1421110/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp


[Touch-packages] [Bug 1421110] Re: sssd missconfigured in apparamor profile

2015-02-12 Thread Laurent Pointal
One more apparmor config to add:

  capability sys_admin,


** Tags added: sssd

** Tags added: apparmod

** Also affects: apparmor (Ubuntu)
   Importance: Undecided
   Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1421110

Title:
  sssd missconfigured in apparamor profile

Status in apparmor package in Ubuntu:
  New
Status in sssd package in Ubuntu:
  New

Bug description:
  After last update (11/2/2015) in my Ubuntu Server 14.04, i have my
  syslog filled with repetition of apparmor messages (see below), adding
  following lines in /etc/apparmor.d/usr.sbin.sssd help for some of the
  messages (I investigate for last ones).

   @{PROC}/[0-9]*/net/psched r,
/etc/libnl-3/classid r,
/usr/lib/x86_64-linux-gnu/samba/ldb/* m,

  
  Feb 12 08:44:58 neobingo kernel: [172114.878569] type=1400 
audit(1423727098.271:7774537): apparmor=STATUS operation=profile_replace 
profile=unconfined name=/usr/sbin/sssd pid=31752 comm=apparmor_parser
  Feb 12 08:44:58 neobingo kernel: [172114.920422] type=1400 
audit(1423727098.315:7774538): apparmor=ALLOWED operation=open 
profile=/usr/sbin/sssd name=/proc/31753/net/psched pid=31753 comm=sssd 
requested_mask=r denied_mask=r fsuid=0 ouid=0
  Feb 12 08:44:58 neobingo kernel: [172114.920925] type=1400 
audit(1423727098.315:7774539): apparmor=ALLOWED operation=open 
profile=/usr/sbin/sssd name=/etc/libnl-3/classid pid=31753 comm=sssd 
requested_mask=r denied_mask=r fsuid=0 ouid=0
  Feb 12 08:44:58 neobingo kernel: [172114.921370] type=1400 
audit(1423727098.315:7774540): apparmor=ALLOWED operation=capable 
profile=/usr/sbin/sssd pid=31753 comm=sssd capability=21  
capname=sys_admin
  Feb 12 08:44:58 neobingo kernel: [172114.932424] type=1400 
audit(1423727098.327:7774541): apparmor=ALLOWED operation=file_mmap 
profile=/usr/sbin/sssd name=/usr/lib/x86_64-linux-gnu/samba/ldb/acl.so 
pid=31753 comm=sssd requested_mask=m denied_mask=0
  Feb 12 08:44:58 neobingo kernel: [172114.944467] type=1400 
audit(1423727098.339:7774542): apparmor=ALLOWED operation=file_mmap 
profile=/usr/sbin/sssd name=/usr/lib/x86_64-linux-gnu/samba/ldb/aclread.so 
pid=31753 comm=sssd requested_mask=m denied_m0
  Feb 12 08:44:58 neobingo kernel: [172114.945151] type=1400 
audit(1423727098.339:7774543): apparmor=ALLOWED operation=file_mmap 
profile=/usr/sbin/sssd name=/usr/lib/x86_64-linux-gnu/samba/ldb/anr.so 
pid=31753 comm=sssd requested_mask=m denied_mask=0
  Feb 12 08:44:58 neobingo kernel: [172114.945550] type=1400 
audit(1423727098.339:7774544): apparmor=ALLOWED operation=file_mmap 
profile=/usr/sbin/sssd 
name=/usr/lib/x86_64-linux-gnu/samba/ldb/descriptor.so pid=31753 comm=sssd 
requested_mask=m denie0
  Feb 12 08:44:58 neobingo kernel: [172114.946220] type=1400 
audit(1423727098.339:7774545): apparmor=ALLOWED operation=file_mmap 
profile=/usr/sbin/sssd name=/usr/lib/x86_64-linux-gnu/samba/ldb/dirsync.so 
pid=31753 comm=sssd requested_mask=m denied_m0
  Feb 12 08:44:58 neobingo kernel: [172114.946978] type=1400 
audit(1423727098.339:7774546): apparmor=ALLOWED operation=file_mmap 
profile=/usr/sbin/sssd 
name=/usr/lib/x86_64-linux-gnu/samba/ldb/extended_dn_in.so pid=31753 
comm=sssd requested_mask=m d0
  Feb 12 08:44:59 neobingo kernel: [172115.667342] init: sssd main process 
(31753) terminated with status 4
  Feb 12 08:44:59 neobingo kernel: [172115.667360] init: sssd main process 
ended, respawning
  Feb 12 08:45:00 neobingo kernel: [172116.761986] init: sssd main process 
(31761) terminated with status 4
  Feb 12 08:45:00 neobingo kernel: [172116.762004] init: sssd main process 
ended, respawning
  Feb 12 08:45:01 neobingo kernel: [172117.807237] init: sssd main process 
(31769) terminated with status 4
  Feb 12 08:45:01 neobingo kernel: [172117.807256] init: sssd main process 
ended, respawning
  Feb 12 08:45:02 neobingo kernel: [172118.932187] init: sssd main process 
(31777) terminated with status 4
  Feb 12 08:45:02 neobingo kernel: [172118.932210] init: sssd main process 
ended, respawning
  Feb 12 08:45:03 neobingo kernel: [172119.994233] init: sssd main process 
(31785) terminated with status 4
  Feb 12 08:45:03 neobingo kernel: [172119.994246] init: sssd main process 
ended, respawning
  Feb 12 08:45:03 neobingo kernel: [172120.213741] audit_printk_skb: 630 
callbacks suppressed

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1421110/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp