[Touch-packages] [Bug 1445219] Re: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS
*** This bug is a duplicate of bug 1307665 *** https://bugs.launchpad.net/bugs/1307665 ** This bug has been marked a duplicate of bug 1307665 signal entries in audit.log send aa-logprof in infinite loop -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1445219 Title: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS Status in AppArmor Linux application security framework: Fix Released Status in apparmor package in Ubuntu: New Bug description: Currently, aa-logprof hangs indefinitely in Ubuntu 14.04 LTS. This is with kernel 3.13.0-39-generic, on x86_64. The version of apparmor installed is: apparmor 2.8.95~2430-0ubuntu5.1 apparmor-utils 2.8.95~2430-0ubuntu5.1 To manage notifications about this bug go to: https://bugs.launchpad.net/apparmor/+bug/1445219/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1445219] Re: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS
Thank you. I'm still a bit confused, because the bug 1307665 report seems to indicate that a patch has been released, but an update isn't coming through the PPAs. Oh well...I'll go bother them over there. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1445219 Title: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS Status in AppArmor Linux application security framework: Fix Released Status in apparmor package in Ubuntu: New Bug description: Currently, aa-logprof hangs indefinitely in Ubuntu 14.04 LTS. This is with kernel 3.13.0-39-generic, on x86_64. The version of apparmor installed is: apparmor 2.8.95~2430-0ubuntu5.1 apparmor-utils 2.8.95~2430-0ubuntu5.1 To manage notifications about this bug go to: https://bugs.launchpad.net/apparmor/+bug/1445219/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1445219] Re: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS
For some reasons, I can't choose 2.9.0 as "target milestone", only 2.9.2. This bug was already fixed in 2.9.0, even if the target milestone says something different ;-) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1445219 Title: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS Status in AppArmor Linux application security framework: Fix Released Status in apparmor package in Ubuntu: New Bug description: Currently, aa-logprof hangs indefinitely in Ubuntu 14.04 LTS. This is with kernel 3.13.0-39-generic, on x86_64. The version of apparmor installed is: apparmor 2.8.95~2430-0ubuntu5.1 apparmor-utils 2.8.95~2430-0ubuntu5.1 To manage notifications about this bug go to: https://bugs.launchpad.net/apparmor/+bug/1445219/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1445219] Re: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS
As I expected, one of the log lines is type=AVC msg=audit(1429552705.245:1376430): apparmor="DENIED" operation="ptrace" profile="/usr/lib/nagios/plugins/check_denyhosts.pl///bin/ps" pid=2855 comm="ps" requested_mask="trace" denied_mask="trace" peer="/usr/lib/nagios/plugins/check_denyhosts.pl" and that (and the backtrace) confirms that you hit the problem that this is a duplicate of bug 1307665, therefore I'm closing it for upstream AppArmor. I'll leave the Ubuntu part open - an update is really needed... For testing with latest upstream code - I assume you still have the tools, libapparmor etc. still installed and additionally downloaded the tarball. (If you uninstalled some packages, please re-install them.) Your error message indicates that that the 2.9.1 tools can't find the python LibAppArmor bindings, so either it's not installed or it's built for a different python version (I'm not using Ubuntu, therefore I don't know version details). You can try with different python interpreters: python2 ./aa-logprof # or python3 ./aa-logprof ** Changed in: apparmor Status: Incomplete => Fix Committed ** Changed in: apparmor Status: Fix Committed => Fix Released ** Changed in: apparmor Milestone: None => 2.9.2 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1445219 Title: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS Status in AppArmor Linux application security framework: Fix Released Status in apparmor package in Ubuntu: New Bug description: Currently, aa-logprof hangs indefinitely in Ubuntu 14.04 LTS. This is with kernel 3.13.0-39-generic, on x86_64. The version of apparmor installed is: apparmor 2.8.95~2430-0ubuntu5.1 apparmor-utils 2.8.95~2430-0ubuntu5.1 To manage notifications about this bug go to: https://bugs.launchpad.net/apparmor/+bug/1445219/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1445219] Re: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS
Also (and I admit, I'm don't use python that often) I tried to run the userspace tools from 2.9.1 and get the following: Traceback (most recent call last): File "./aa-logprof", line 18, in import apparmor.aa as apparmor File "/home/lacelle/apparmor-2.9.1/utils/apparmor/aa.py", line 29, in import apparmor.logparser File "/home/lacelle/apparmor-2.9.1/utils/apparmor/logparser.py", line 18, in import LibAppArmor ImportError: No module named LibAppArmor Obviously I don't have my python env set up correctly, just not sure how to do so. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1445219 Title: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS Status in AppArmor Linux application security framework: Incomplete Status in apparmor package in Ubuntu: New Bug description: Currently, aa-logprof hangs indefinitely in Ubuntu 14.04 LTS. This is with kernel 3.13.0-39-generic, on x86_64. The version of apparmor installed is: apparmor 2.8.95~2430-0ubuntu5.1 apparmor-utils 2.8.95~2430-0ubuntu5.1 To manage notifications about this bug go to: https://bugs.launchpad.net/apparmor/+bug/1445219/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1445219] Re: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS
I've attached the selective audit.log generated with the grep command above. Here's the backtrace I got when hitting Ctrl-C: Reading log entries from /var/log/audit/audit.log. Updating AppArmor profiles in /etc/apparmor.d. ^CTraceback (most recent call last): File "/usr/sbin/aa-logprof", line 52, in apparmor.do_logprof_pass(logmark) File "/usr/lib/python3/dist-packages/apparmor/aa.py", line 2257, in do_logprof_pass log = log_reader.read_log(logmark) File "/usr/lib/python3/dist-packages/apparmor/logparser.py", line 359, in read_log event = self.parse_log_record(line) File "/usr/lib/python3/dist-packages/apparmor/logparser.py", line 93, in parse_log_record record_event = self.parse_event(record) File "/usr/lib/python3/dist-packages/apparmor/logparser.py", line 139, in parse_event mask, name = log_str_to_mode(ev['profile'], dmask, ev['name2']) File "/usr/lib/python3/dist-packages/apparmor/aamode.py", line 254, in log_str_to_mode mode = str_to_mode(string) File "/usr/lib/python3/dist-packages/apparmor/aamode.py", line 79, in str_to_mode mode = sub_str_to_mode(user) File "/usr/lib/python3/dist-packages/apparmor/aamode.py", line 95, in sub_str_to_mode string = MODE_MAP_RE.sub('', string, 1) KeyboardInterrupt ** Attachment added: "audit.log" https://bugs.launchpad.net/apparmor/+bug/1445219/+attachment/4380206/+files/audit.log -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1445219 Title: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS Status in AppArmor Linux application security framework: Incomplete Status in apparmor package in Ubuntu: New Bug description: Currently, aa-logprof hangs indefinitely in Ubuntu 14.04 LTS. This is with kernel 3.13.0-39-generic, on x86_64. The version of apparmor installed is: apparmor 2.8.95~2430-0ubuntu5.1 apparmor-utils 2.8.95~2430-0ubuntu5.1 To manage notifications about this bug go to: https://bugs.launchpad.net/apparmor/+bug/1445219/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1445219] Re: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS
The backtrace when pressing Ctrl-C is probably also helpful because it indicates _where_ aa-logprof is looping. That said - one of the fixes in the 2.9 branch fixed an endless loop (see bug 1307665), so it would be helpful if you can test with a newer version (2.9.1 or bzr 2.9 branch). To do that, cd directory_with_the_extracted_tarball_or_bzr_checkout cd utils python aa-logprof ** Tags added: aa-tools -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1445219 Title: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS Status in AppArmor Linux application security framework: Incomplete Status in apparmor package in Ubuntu: New Bug description: Currently, aa-logprof hangs indefinitely in Ubuntu 14.04 LTS. This is with kernel 3.13.0-39-generic, on x86_64. The version of apparmor installed is: apparmor 2.8.95~2430-0ubuntu5.1 apparmor-utils 2.8.95~2430-0ubuntu5.1 To manage notifications about this bug go to: https://bugs.launchpad.net/apparmor/+bug/1445219/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1445219] Re: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS
Can you attach some more information that might be useful to debug this issue? Including the output of "grep -i apparmor /var/log/syslog" or "grep -i apparmor /var/log/audit/audit.log" (if you use auditd) will help. Thanks ** Changed in: apparmor Status: New => Incomplete ** Also affects: apparmor (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to apparmor in Ubuntu. https://bugs.launchpad.net/bugs/1445219 Title: aa-logprof hangs indefinitely in Ubuntu 14.04 LTS Status in AppArmor Linux application security framework: Incomplete Status in apparmor package in Ubuntu: New Bug description: Currently, aa-logprof hangs indefinitely in Ubuntu 14.04 LTS. This is with kernel 3.13.0-39-generic, on x86_64. The version of apparmor installed is: apparmor 2.8.95~2430-0ubuntu5.1 apparmor-utils 2.8.95~2430-0ubuntu5.1 To manage notifications about this bug go to: https://bugs.launchpad.net/apparmor/+bug/1445219/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp