Public bug reported:
When rust-coreutils is used as the provider for standard system utilities,
running the who command triggers AppArmor DENIED warnings in dmesg / journalctl.
Unlike the GNU coreutils implementation of who, the Rust implementation
attempts to read /etc/passwd and /etc/nsswitch.conf directly. The
current AppArmor profile for who does not permit reading these files,
resulting in DENIED events and preventing who from resolving UIDs to
usernames.
Log Snippets:
kernel: audit: type=1400 audit(...): apparmor="DENIED" operation="open"
class="file" profile="who" name="/etc/nsswitch.conf" pid=... comm="who"
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
kernel: audit: type=1400 audit(...): apparmor="DENIED" operation="open"
class="file" profile="who" name="/etc/passwd" pid=... comm="who"
requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
** Affects: apparmor (Ubuntu)
Importance: Undecided
Status: New
** Affects: rust-coreutils (Ubuntu)
Importance: Undecided
Status: New
** Also affects: rust-coreutils (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2163559
Title:
apparmor profile for 'who' blocks rust-coreutils implementation from
reading /etc/passwd and /etc/nsswitch.conf
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2163559/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
