enterprise-support team mailing list archive

[Jacek Nykis <1416039@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

I enabled apparmor profile for squid3 by removing symlink in
/etc/apparmor.d/disable

This broke squid, even "squid3 -z" was failing with:
assertion failed: Kid.cc:39: "cpid > 0"

and I saw the following apparmor message:
apparmor="DENIED" operation="exec" profile="/usr/sbin/squid3" name="/usr/sbin/squid3" pid=23413 comm="squid3" requested_mask="x" denied_mask="x" fsuid=0 ouid=0

This can be worked around by adding the following line to /etc/apparmor.d/usr.sbin.squid3:
/usr/sbin/squid3 ix,

** Affects: squid3 (Ubuntu)
     Importance: Undecided
         Status: Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Server/Client Support Team, which is subscribed to squid3 in Ubuntu.
Matching subscriptions: Ubuntu Server/Client Support Team
https://bugs.launchpad.net/bugs/1416039

Title:
  Broken apparmor profile

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/squid3/+bug/1416039/+subscriptions