touch-packages team mailing list archive

[Laurent Pointal <laurent.pointal@xxxxxxxxxxx>]

One more apparmor config to add:

  capability sys_admin,


** Tags added: sssd

** Tags added: apparmod

** Also affects: apparmor (Ubuntu)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1421110

Title:
  sssd missconfigured in apparamor profile

Status in apparmor package in Ubuntu:
  New
Status in sssd package in Ubuntu:
  New

Bug description:
  After last update (11/2/2015) in my Ubuntu Server 14.04, i have my
  syslog filled with repetition of apparmor messages (see below), adding
  following lines in /etc/apparmor.d/usr.sbin.sssd help for some of the
  messages (I investigate for last ones).

   @{PROC}/[0-9]*/net/psched r,
    /etc/libnl-3/classid r,
    /usr/lib/x86_64-linux-gnu/samba/ldb/* m,

  
  Feb 12 08:44:58 neobingo kernel: [172114.878569] type=1400 audit(1423727098.271:7774537): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="/usr/sbin/sssd" pid=31752 comm="apparmor_parser"
  Feb 12 08:44:58 neobingo kernel: [172114.920422] type=1400 audit(1423727098.315:7774538): apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/proc/31753/net/psched" pid=31753 comm="sssd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
  Feb 12 08:44:58 neobingo kernel: [172114.920925] type=1400 audit(1423727098.315:7774539): apparmor="ALLOWED" operation="open" profile="/usr/sbin/sssd" name="/etc/libnl-3/classid" pid=31753 comm="sssd" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
  Feb 12 08:44:58 neobingo kernel: [172114.921370] type=1400 audit(1423727098.315:7774540): apparmor="ALLOWED" operation="capable" profile="/usr/sbin/sssd" pid=31753 comm="sssd" capability=21  capname="sys_admin"
  Feb 12 08:44:58 neobingo kernel: [172114.932424] type=1400 audit(1423727098.327:7774541): apparmor="ALLOWED" operation="file_mmap" profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/samba/ldb/acl.so" pid=31753 comm="sssd" requested_mask="m" denied_mask=0
  Feb 12 08:44:58 neobingo kernel: [172114.944467] type=1400 audit(1423727098.339:7774542): apparmor="ALLOWED" operation="file_mmap" profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/samba/ldb/aclread.so" pid=31753 comm="sssd" requested_mask="m" denied_m0
  Feb 12 08:44:58 neobingo kernel: [172114.945151] type=1400 audit(1423727098.339:7774543): apparmor="ALLOWED" operation="file_mmap" profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/samba/ldb/anr.so" pid=31753 comm="sssd" requested_mask="m" denied_mask=0
  Feb 12 08:44:58 neobingo kernel: [172114.945550] type=1400 audit(1423727098.339:7774544): apparmor="ALLOWED" operation="file_mmap" profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/samba/ldb/descriptor.so" pid=31753 comm="sssd" requested_mask="m" denie0
  Feb 12 08:44:58 neobingo kernel: [172114.946220] type=1400 audit(1423727098.339:7774545): apparmor="ALLOWED" operation="file_mmap" profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/samba/ldb/dirsync.so" pid=31753 comm="sssd" requested_mask="m" denied_m0
  Feb 12 08:44:58 neobingo kernel: [172114.946978] type=1400 audit(1423727098.339:7774546): apparmor="ALLOWED" operation="file_mmap" profile="/usr/sbin/sssd" name="/usr/lib/x86_64-linux-gnu/samba/ldb/extended_dn_in.so" pid=31753 comm="sssd" requested_mask="m" d0
  Feb 12 08:44:59 neobingo kernel: [172115.667342] init: sssd main process (31753) terminated with status 4
  Feb 12 08:44:59 neobingo kernel: [172115.667360] init: sssd main process ended, respawning
  Feb 12 08:45:00 neobingo kernel: [172116.761986] init: sssd main process (31761) terminated with status 4
  Feb 12 08:45:00 neobingo kernel: [172116.762004] init: sssd main process ended, respawning
  Feb 12 08:45:01 neobingo kernel: [172117.807237] init: sssd main process (31769) terminated with status 4
  Feb 12 08:45:01 neobingo kernel: [172117.807256] init: sssd main process ended, respawning
  Feb 12 08:45:02 neobingo kernel: [172118.932187] init: sssd main process (31777) terminated with status 4
  Feb 12 08:45:02 neobingo kernel: [172118.932210] init: sssd main process ended, respawning
  Feb 12 08:45:03 neobingo kernel: [172119.994233] init: sssd main process (31785) terminated with status 4
  Feb 12 08:45:03 neobingo kernel: [172119.994246] init: sssd main process ended, respawning
  Feb 12 08:45:03 neobingo kernel: [172120.213741] audit_printk_skb: 630 callbacks suppressed

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1421110/+subscriptions