Public bug reported:
I run AppArmor (2.6.1-0ubuntu3) on Ubuntu natty amd64. I recently
activated the usr.sbin.sshd profile (from apparmor-profiles, Version
2.6.1-0ubuntu3) and recognized that OpenSSH remote login is no longer
working.
The following messages are visible in syslog:
kernel: [70383.925481] type=1400 audit(1311930435.095:50130): apparmor="DENIED"
operation="open" parent=910 profile="/usr/sbin/sshd" name="/etc/default/locale"
pid=6439 comm="sshd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
kernel: [70383.935676] type=1400 audit(1311930435.105:50131): apparmor="DENIED"
operation="exec" parent=6439 profile="/usr/sbin/sshd" name="/bin/dash" pid=6444
comm="sshd" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
[70383.935879] type=1400 audit(1311930435.105:50132): apparmor="DENIED"
operation="open" parent=910 profile="/usr/sbin/sshd" name="/var/run/motd"
pid=6439 comm="sshd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
[70383.936056] type=1400 audit(1311930435.105:50133): apparmor="DENIED"
operation="open" parent=910 profile="/usr/sbin/sshd"
name="/etc/security/limits.d/" pid=6439 comm="sshd" requested_mask="r"
denied_mask="r" fsuid=0 ouid=0
[70383.936754] type=1400 audit(1311930435.105:50134): apparmor="DENIED"
operation="open" parent=6439 profile="/usr/sbin/sshd"
name="/etc/default/locale" pid=6445 comm="sshd" requested_mask="r"
denied_mask="r" fsuid=0 ouid=0
[70383.938703] type=1400 audit(1311930435.105:50135): apparmor="DENIED"
operation="exec" parent=6445 profile="/usr/sbin/sshd" name="/bin/zsh4" pid=6446
comm="sshd" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
[70383.940877] type=1400 audit(1311930435.115:50136): apparmor="DENIED"
operation="open" parent=910 profile="/usr/sbin/sshd" name="/etc/default/locale"
pid=6439 comm="sshd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
The messages from sshd in /var/log/auth.log are as follows:
sshd[9593]: Accepted publickey for matthias from ::1 port 34353 ssh2
sshd[9593]: pam_env(sshd:setcred): Unable to open env file:
/etc/default/locale: Permission denied
sshd[9593]: pam_unix(sshd:session): session opened for user matthias by (uid=0)
sshd[9593]: pam_limits(sshd:session): Could not set limit for 'nproc' to
soft=-1, hard=-1: Operation not permitted; uid=0,euid=0
sshd[9593]: pam_limits(sshd:session): Could not set limit for 'nice' to
soft=20, hard=20: Operation not permitted; uid=0,euid=0
sshd[9600]: pam_env(sshd:setcred): Unable to open env file:
/etc/default/locale: Permission denied
sshd[9600]: Received disconnect from ::1: 11: disconnected by user
sshd[9593]: pam_unix(sshd:session): session closed for user matthias
sshd[9593]: pam_env(sshd:setcred): Unable to open env file:
/etc/default/locale: Permission denied
The message as seen by the user is as follows:
% ssh localhost
Last login: Fri Jul 29 11:26:19 2011 from localhost
/bin/zsh: Permission denied
Connection to localhost closed.
I changed the profile to fix these issues. Its attached to the bug
report.
** Affects: apparmor (Ubuntu)
Importance: Undecided
Status: New
** Tags: apparmor sshd
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/817956
Title:
Bugs in AppArmor usr.bin.sshd profile
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/817956/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
