touch-packages team mailing list archive

[Christian Boltz <1518663@xxxxxxxxxxxxxxxxxx>]

The fix *) for this is in upstream AppArmor 2.10 and will also be in
2.9.3.

*) fix means ignoring those log entries to avoid the crash. Ideally aa-
logprof should propose adding the attach_disconnected flag. See also
https://bugzilla.opensuse.org/show_bug.cgi?id=918787

Note: You'll need to add   flags=(attach_disconnected)   to your openvpn
profile

To avoid aa-logprof crashes again, rotate audit.log away (or update to a
newer version of the AppArmor utils that contains the fix).

** Bug watch added: bugzilla.opensuse.org/ #918787
   http://bugzilla.opensuse.org/show_bug.cgi?id=918787

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1518663

Title:
  Disconnected path errors

Status in apparmor package in Ubuntu:
  New

Bug description:
  The first error is that the audit message (notice the path):

  type=AVC msg=audit(1448143203.902:359992): apparmor="DENIED"
  operation="file_mmap" info="Failed name lookup - disconnected path"
  error=-13 profile="/usr/sbin/openvpn" name="run/nscd/dbfQMsBd"
  pid=25814 comm="openvpn" requested_mask="r" denied_mask="r" fsuid=0
  ouid=0

  appears in the audit log. The second is that aa-logprof throws an
  exception on reading it:

  Traceback (most recent call last):
    File "/usr/sbin/aa-logprof", line 54, in <module>
      apparmor.do_logprof_pass(logmark)
    File "/usr/lib/python3.4/site-packages/apparmor/aa.py", line 2289, in do_logprof_pass
      ask_the_questions()
    File "/usr/lib/python3.4/site-packages/apparmor/aa.py", line 1762, in ask_the_questions
      severity = sev_db.rank(path, mode_to_str(mode))
    File "/usr/lib/python3.4/site-packages/apparmor/severity.py", line 141, in rank
      raise AppArmorException("Unexpected rank input: %s" % resource)
  apparmor.common.AppArmorException: 'Unexpected rank input: run/nscd/dbfQMsBd'

  I've been having this problem for several years.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1518663/+subscriptions