[apparmor] [profile] /etc/cron.daily/logrotate: updated version - new DENIED access.

2017-02-07 Thread daniel curtis
Hi Seth >> Yes, this looks like a good addition to your logrotate profile. Okay, added. Thank You very, very much. I hope, that Christian will take into account all these rules and will update the logrotate profile ;- ) Best regards. -- AppArmor mailing list AppArmor@lists.ubuntu.com Modify set

Re: [apparmor] [profile] /etc/cron.daily/logrotate: updated version - new DENIED access.

2017-02-06 Thread Seth Arnold
On Sun, Feb 05, 2017 at 11:51:56AM +0100, daniel curtis wrote: > /bin/echo mrix, > > It is okay? I think, that maybe logrotate profile should be updated. Yes, this looks like a good addition to your logrotate profile. Thanks signature.asc Description: PGP signature -- AppArmor mailing list Ap

[apparmor] [profile] /etc/cron.daily/logrotate: updated version - new DENIED access.

2017-02-05 Thread daniel curtis
Hi Today, I noticed a new entries related to the logrotate profile. System was slowing down, two files - '/var/log/kern.log' and '/var/log/syslog' - were empty so I checked '/var/log/kern.log.1' file and there was something like this: Feb 5 11:34:52 t4 kernel: [ 1859.724491] type=1400 audit(1486

[apparmor] [profile] /etc/cron.daily/logrotate: updated version - new DENIED access.

2017-01-30 Thread daniel curtis
Hi Christian Thank You very much for an answer and looking at this issue. So, everything is okay and you'll update the logrotate profile, right? Of course, I also have to add these two rules (instead my proposition with five new rules): /etc/rc?.d/ r, /usr/bin/xargs mrix, Christian, if You would

Re: [apparmor] [profile] /etc/cron.daily/logrotate: updated version - new DENIED access.

2017-01-29 Thread Christian Boltz
Hello, Am Sonntag, 29. Januar 2017, 14:33:22 CET schrieb daniel curtis: > I'm sorry for a double messages, but I didn't noticed one entry: > "/etc/rcS.d/". So, now my proposition for a new rules is: Your log messages don't indicate that invoke-rc.d wants to read any file in /etc/rc*.d/, so only

[apparmor] [profile] /etc/cron.daily/logrotate: updated version - new DENIED access.

2017-01-29 Thread daniel curtis
I'm sorry for a double messages, but I didn't noticed one entry: "/etc/rcS.d/". So, now my proposition for a new rules is: /etc/rc2.d/ r, /etc/rc2.d/* r, /etc/rcS.d/ r, /etc/rcS.d/* r, /usr/bin/xargs mrix, What do you think - is it okay? -- AppArmor mailing list AppArmor@lists.ubuntu.com Modif

[apparmor] [profile] /etc/cron.daily/logrotate: updated version - new DENIED access.

2017-01-29 Thread daniel curtis
Hi Today I've noticed a strange thing - new DENIED entries, related to the logrotate, in log files such as '/var/log/kern.log' and '/var/log/syslog'. Honestly, I wonder why these entries have appeared after such a long time. I thought, that a profile for logrotate has been updated properly. Maybe