[Bug 760325] New: for dnsmasq package, please add comment and default value for resolv-file that is compatible with default apparmor profile - openSUSE Bugs - openSUSE Mailing Lists

newer
[Bug 572990] New: missing prereq...

[Bug 760325] New: for dnsmasq package, please add comment and default value for resolv-file that is compatible with default apparmor profile

older
[Bug 769025] New: /etc/init.d/kbd...

bugzilla_noreply＠novell.com

2 May 2012 2 May '12

15:35

https://bugzilla.novell.com/show_bug.cgi?id=760325 https://bugzilla.novell.com/show_bug.cgi?id=760325#c0 Summary: for dnsmasq package, please add comment and default value for resolv-file that is compatible with default apparmor profile Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: x86-64 OS/Version: openSUSE 12.1 Status: NEW Severity: Enhancement Priority: P5 - None Component: Other AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: peter.maloney@brockmann-consult.de QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:11.0) Gecko/20100101 Firefox/11.0 For dnsmasq, in the dnsmasq.conf, please add the following warning about apparmor where the "resolv-file" setting is, and provide a good default based on the default apparmor profile: # Beware that apparmor blocks most files on the system, but allows read access to /etc/dnsmasq.d, so consider placing your files there. #resolv-file=/etc/dnsmasq.d/my.resolv.conf Here is a bug report about it: https://dev.openwrt.org/ticket/6899 I don't know if all posters there have the problem because of apparmor. Reproducible: Always Steps to Reproduce: 1. install dnsmasq and set resolv-file to something in /etc/ (using default settings of everything else [apparmor, dnsmasq]) 2. restart dnsmasq 3. see the "Permission Denied" error in /var/log/messages which apparently mystifies many users -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

Show replies by date

bugzilla_noreply＠novell.com

3 May 3 May

06:58

New subject: [Bug 760325] for dnsmasq package, please add comment and default value for resolv-file that is compatible with default apparmor profile

https://bugzilla.novell.com/show_bug.cgi?id=760325 https://bugzilla.novell.com/show_bug.cgi?id=760325#c1 kk zhang changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kkzhang@suse.com AssignedTo|bnc-team-screening@forge.pr |ug@suse.com |ovo.novell.com | --- Comment #1 from kk zhang 2012-05-03 06:58:51 UTC --- Hi,could you please help to have a look at this?Thank you:) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

08:16

New subject: [Bug 760325] for dnsmasq package, please add comment and default value for resolv-file that is compatible with default apparmor profile

https://bugzilla.novell.com/show_bug.cgi?id=760325 https://bugzilla.novell.com/show_bug.cgi?id=760325#c2 Uwe Gansert changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ug@suse.com AssignedTo|ug@suse.com |mszeredi@novell.com --- Comment #2 from Uwe Gansert 2012-05-03 08:16:11 UTC --- Miklos, can you please add /etc/resolv.conf r, /etc/hosts r, to the apparmor profile of dnsmasq? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

08:47

New subject: [Bug 760325] for dnsmasq package, please add comment and default value for resolv-file that is compatible with default apparmor profile

https://bugzilla.novell.com/show_bug.cgi?id=760325 https://bugzilla.novell.com/show_bug.cgi?id=760325#c3 Peter Maloney changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |peter.maloney@brockmann-con | |sult.de --- Comment #3 from Peter Maloney 2012-05-03 08:46:59 UTC --- I don't see /etc/resolv.conf or /etc/hosts in the resolv.conf, but I didn't have any problems with those files. (I'm not an apparmor expert, but I assume these are inherited somehow) But people tend to have resolv.conf files generated somehow, and those can't be read. So there just needs to be a warning somewhere. In the bug I linked to above, the guy was using ppp to generate a file in "/tmp/resolv.conf.auto". You can't predict every weird choice they make, but you can add a note where they are editing the dnsmasq.conf file so they realize if "/tmp/..." was a bad place to put it, and realize why /etc/dnsmasq.d/ or some other location is better. And in my case, I wanted my resolv.conf to point to localhost as the dns server, and dnsmasq to use a different file. Using the same file would have created an infinite loop. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

08:49

New subject: [Bug 760325] for dnsmasq package, please add comment and default value for resolv-file that is compatible with default apparmor profile

https://bugzilla.novell.com/show_bug.cgi?id=760325 https://bugzilla.novell.com/show_bug.cgi?id=760325#c4 --- Comment #4 from Peter Maloney 2012-05-03 08:49:30 UTC --- Here you can see /etc/hosts is readable: May 2 16:53:07 peter dnsmasq[18837]: exiting on receipt of SIGTERM May 2 16:53:08 peter dnsmasq[19112]: Shutting name service masq caching server ..done May 2 16:53:08 peter dnsmasq[19133]: started, version 2.59 cachesize 150 May 2 16:53:08 peter dnsmasq[19133]: compile time options: IPv6 GNU-getopt DBus i18n DHCP TFTP no-conntrack IDN May 2 16:53:08 peter dnsmasq[19133]: read /etc/hosts - 8 addresses May 2 16:53:08 peter dnsmasq[19133]: failed to read /etc/resolv.all.conf: Permission denied May 2 16:53:08 peter dnsmasq[19122]: Starting name service masq caching server ..done Here you can see /etc/resolv.conf is readable too: May 2 16:51:32 peter dnsmasq[18367]: exiting on receipt of SIGTERM May 2 16:51:32 peter dnsmasq[18817]: Shutting name service masq caching server ..done May 2 16:51:32 peter dnsmasq[18837]: started, version 2.59 cachesize 150 May 2 16:51:32 peter dnsmasq[18837]: compile time options: IPv6 GNU-getopt DBus i18n DHCP TFTP no-conntrack IDN May 2 16:51:32 peter dnsmasq[18837]: read /etc/hosts - 8 addresses May 2 16:51:32 peter dnsmasq[18837]: using nameserver ... May 2 16:51:32 peter dnsmasq[18826]: Starting name service masq caching server ..done -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

16:06

New subject: [Bug 760325] for dnsmasq package, please add comment and default value for resolv-file that is compatible with default apparmor profile

https://bugzilla.novell.com/show_bug.cgi?id=760325 https://bugzilla.novell.com/show_bug.cgi?id=760325#c5 Uwe Gansert changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |WONTFIX --- Comment #5 from Uwe Gansert 2012-05-03 16:06:51 UTC --- oh okay, sorry. Then I misunderstood the report. But to be honest, I don't see any reason to document it in the dnsmasq package, that you have to change your apparmor config if you change the defaults of dnsmasq. But thanks for the report anyway. Feedback is always appreciated. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

8 May 8 May

00:26

New subject: [Bug 760325] for dnsmasq package, please add comment and default value for resolv-file that is compatible with default apparmor profile

https://bugzilla.novell.com/show_bug.cgi?id=760325 https://bugzilla.novell.com/show_bug.cgi?id=760325#c6 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED CC| |suse-beta@cboltz.de Resolution|WONTFIX | --- Comment #6 from Christian Boltz 2012-05-08 02:26:05 CEST --- And the funny part is: RTFM would have avoided this bugreport ;-) README.SUSE contains: place of resolv.conf ==================== The default of dnsmasq is to use /etc/resolv.conf If you want to use dnsmasq not only for your network but also for the machine it is running on, you need to use /var/run/dnsmasq-forwarders.conf instead of /etc/resolv.conf the directory /etc/ppp/ is not readable by dnsmasq on openSUSE and SUSE Linux Enterprise Server for security reasons. *SCNR* @Uwe: maybe you could add a hint about the AppArmor profile in the README.SUSE? "/etc/ppp/ is not readable" isn't completely wrong (and probably refers to the filesystem permissions), but AppArmor will prevent read access to much more directories ;-) Adding a hint to use /etc/dnsmasq.d/ might be a good idea. I'm reopening the bug to avoid it gets lost - feel free to close as wontfix again if you don't like the addition to README.SUSE. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

17 May 17 May

11:11

New subject: [Bug 760325] for dnsmasq package, please add comment and default value for resolv-file that is compatible with default apparmor profile

https://bugzilla.novell.com/show_bug.cgi?id=760325 https://bugzilla.novell.com/show_bug.cgi?id=760325#c7 Miklos Szeredi changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mszeredi@novell.com AssignedTo|mszeredi@novell.com |ug@suse.com --- Comment #7 from Miklos Szeredi 2012-05-17 11:11:00 UTC --- -> Uwe -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

3 Aug 3 Aug

13:02

New subject: [Bug 760325] for dnsmasq package, please add comment and default value for resolv-file that is compatible with default apparmor profile

https://bugzilla.novell.com/show_bug.cgi?id=760325 https://bugzilla.novell.com/show_bug.cgi?id=760325#c8 Uwe Gansert changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |FIXED --- Comment #8 from Uwe Gansert 2012-08-03 13:02:44 UTC --- I have added a sentence to the README -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

4293

Age (days ago)

4386

Last active (days ago)

Download

8 comments

1 participants

tags

participants (1)

bugzilla_noreply＠novell.com