[Bug 561152] New: root cause seems to prevent dhclient from opening /proc/net/dev - openSUSE Bugs - openSUSE Mailing Lists

newer
[Bug 561274] New: Touchpad Tap is...

[Bug 561152] New: root cause seems to prevent dhclient from opening /proc/net/dev

older
[Bug 560163] New: YaST hardware...

bugzilla_noreply＠novell.com

5 Dec 2009 5 Dec '09

20:03

http://bugzilla.novell.com/show_bug.cgi?id=561152 http://bugzilla.novell.com/show_bug.cgi?id=561152#c0 Summary: root cause seems to prevent dhclient from opening /proc/net/dev Classification: openSUSE Product: openSUSE 11.2 Version: Final Platform: x86-64 OS/Version: openSUSE 11.2 Status: NEW Severity: Major Priority: P5 - None Component: Kernel AssignedTo: kernel-maintainers@forge.provo.novell.com ReportedBy: estellnb@gmail.com QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (compatible; Konqueror/4.3; Linux) KHTML/4.3.1 (like Gecko) SUSE

strace dhclient 2>&1 | grep /proc/net/dev open("/proc/net/dev", O_RDONLY) = -1 EACCES (Permission denied) write(2, "/proc/net/dev: Permission denied", 32/proc/net/dev: Permission denied) = 32 ls -l /proc/net/dev -r--r--r-- 1 root root 0 5. Dez 21:00 /proc/net/dev python

...
...
x=os.open("/proc/net/dev",os.O_RDONLY) os.read(x,100) 'Inter-| Receive | Transmit\n face |bytes packets' os.close(x)

So why does it refuse dhclient to open /proc/net/dev if the same is granted to python?

uname -r 2.6.32-2.99.116.e1d7581-desktop

Reproducible: Always -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

Show replies by date

bugzilla_noreply＠novell.com

7 Dec 7 Dec

16:17

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

http://bugzilla.novell.com/show_bug.cgi?id=561152 http://bugzilla.novell.com/show_bug.cgi?id=561152#c1 Jeff Mahoney changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |estellnb@gmail.com AssignedTo|kernel-maintainers@forge.pr |jeffm@novell.com |ovo.novell.com | --- Comment #1 from Jeff Mahoney 2009-12-07 16:17:06 UTC --- Can you unload AppArmor and try to reproduce? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

17 Dec 17 Dec

13:52

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

http://bugzilla.novell.com/show_bug.cgi?id=561152 http://bugzilla.novell.com/show_bug.cgi?id=561152#c2 Elmar Stellnberger changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|estellnb@gmail.com | --- Comment #2 from Elmar Stellnberger 2009-12-17 13:52:36 UTC --- The problem is Apparmor specific and persists with kernel 2.6.32.1-0.0.19.413cccf-desktop. Access is denied though "@{PROC}/net/dev r," is part of the profile; adding /proc/net/dev directly does not help either. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

2 Jan 2 Jan

20:21

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

http://bugzilla.novell.com/show_bug.cgi?id=561152 http://bugzilla.novell.com/show_bug.cgi?id=561152#c3 --- Comment #3 from Elmar Stellnberger 2010-01-02 20:21:55 UTC --- What about this bug? Now that Apparmor has been ported to kernel-2.6.32 we need to get this resolved in order to make use of Apparmor. If it can not even interprete profiles correctly there will be no way to use it as required. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

6 Jan 6 Jan

20:09

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c4 --- Comment #4 from Jeff Mahoney 2011-01-06 20:09:14 UTC --- Hrm. This issue still exists in Factory, even with AppArmor 2.5.1. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

20:11

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c5 --- Comment #5 from Jeff Mahoney 2011-01-06 20:11:44 UTC --- Ah. It's because /proc/net is a symlink to /proc/self/net now. That's an easy fix. The profile still has other problems, though, because now /sbin/dhclient-script fails instead. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

21:32

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c6 --- Comment #6 from Jeff Mahoney 2011-01-06 21:32:06 UTC --- Huh. Actually that's not the case on Factory. It works fine. I was testing on 11.3 by accident. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

22:41

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c7 --- Comment #7 from Jeff Mahoney 2011-01-06 22:41:46 UTC --- Ok, now that the /proc/self/net problem is fixed - this rabbit hole is deep. netconfig needs a profile for this to work unless you want netconfig to run unconfined. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

23:10

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c8 --- Comment #8 from Jeff Mahoney 2011-01-06 23:10:11 UTC --- .. and that's really the only sane option. It's a shell script that runs as root and the admin is allowed to extend by adding extension to /etc/netconfig.d. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

17 Jan 17 Jan

16:46

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c9 Jeff Mahoney changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Kernel |Kernel Version|Final |Factory Product|openSUSE 11.2 |openSUSE 11.4 OS/Version|openSUSE 11.2 |SuSE Other --- Comment #9 from Jeff Mahoney 2011-01-17 16:46:24 UTC --- Bumping product to openSUSE 11.4 as this issue still exists. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

16:46

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c Jeff Mahoney changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Kernel |AppArmor -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

25 Jan 25 Jan

22:27

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c10 Jeff Mahoney changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |estellnb@gmail.com --- Comment #10 from Jeff Mahoney 2011-01-25 22:27:08 UTC --- I've updated the apparmor package in security:apparmor:factory with the new profiles. Can you test? It should have this changelog entry: - Updated dhclient profile and added dhclient-script profile (bnc#561152). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

26 Jan 26 Jan

22:53

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c11 Elmar Stellnberger changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|estellnb@gmail.com | --- Comment #11 from Elmar Stellnberger 2011-01-26 22:52:59 UTC --- Well, I can`t install apparmor from factory because crucial system components of 11.3 require perl-5.12; and installing perl-5.12.3 in addition would be no good idea either because I would at least have to make a choice for one of both /usr/bin/perls. Can`t you simply post the profile? Testing the new profile with the 11.3 apparmor should work as well; shouldn`t it? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

27 Jan 27 Jan

15:17

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c12 --- Comment #12 from Jeff Mahoney 2011-01-27 15:17:41 UTC --- Created an attachment (id=410789) --> (http://bugzilla.novell.com/attachment.cgi?id=410789) sbin.dhclient profile -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

15:18

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c13 --- Comment #13 from Jeff Mahoney 2011-01-27 15:18:12 UTC --- Created an attachment (id=410790) --> (http://bugzilla.novell.com/attachment.cgi?id=410790) sbin.dhclient-script profile -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

15:18

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c Jeff Mahoney changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |estellnb@gmail.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

28 Jan 28 Jan

22:36

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c14 Elmar Stellnberger changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|estellnb@gmail.com | --- Comment #14 from Elmar Stellnberger 2011-01-28 22:36:19 UTC --- Well. It didn`t work as provided; dhclient was spying out a lot of error messages when simply invoking 'dhclient eth0'. Nonetheless I started to update both profiles manually and now it works quite well: no fatal errors, well retrieved IP-adr. The only error message I could not get rid of in /var/log/audit/audit.log is: type=APPARMOR_DENIED msg=audit(1296253690.147:2770): operation="open" pid=10048 parent=10047 profile="/sbin/dhclient-script" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/proc/" There was also a little error inside: dhclient-script is defined by its own profile so it needs the p-option instead of i-inherit. /sbin/dhclient-script mrpx, -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

22:38

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c15 --- Comment #15 from Elmar Stellnberger 2011-01-28 22:38:00 UTC --- Created an attachment (id=411097) --> (http://bugzilla.novell.com/attachment.cgi?id=411097) sbin.dhclient (updated) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

22:39

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c16 --- Comment #16 from Elmar Stellnberger 2011-01-28 22:39:14 UTC --- Created an attachment (id=411098) --> (http://bugzilla.novell.com/attachment.cgi?id=411098) sbin.dhclient-script (updated) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

14 Mar 14 Mar

19:07

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c17 Jeff Mahoney changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |coolo@novell.com --- Comment #17 from Jeff Mahoney 2011-03-14 19:07:04 UTC --- I think it's going to work better to ship dhclient-script as unconfined and let users who want to confine it create a profile. A shell script that handles plugins is going to touch lots of things. Coolo, what's your opinion here? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

30 Mar 30 Mar

13:07

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c18 Stephan Kulow changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|coolo@novell.com | --- Comment #18 from Stephan Kulow 2011-03-30 15:07:03 CEST --- hmm, I have no oppinion. Not my area of expertise. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

16:26

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c19 --- Comment #19 from Elmar Stellnberger 2011-03-30 16:26:23 UTC --- I believe we should have disabled all the apparmor profiles that don`t work for the 11.4 release by default. Perhaps we find someone who can reliably test through all of them. However we do still have enough time till the next release so that we could approach a better solution: Let auditd mirror all apparmor access denial messages to the console where the program runs by default. This will avoid confused and perplexed users who have no idea on why normal standard programs just don`t want to work. As a goody we can output a message like "unprotect this program by 'complain /etc/apparmor.d/sbin.dhclient' and complain '/etc/apparmor.d/sbin.dhclient-script'". The profile I have posted for dhclient lately does only cover the core functionality of retrieving a dynamic IP but not nameserver router or wlan configuration. Perhaps I will catch some time in late summer or autumn to leverage updates for core profiles. To me personally if I consider it again approaching to deploy SELinux does also become increasingly interesting since it now offers protection for Xorg which Apparmor does not. An in deed curcial component on every graph. desktop system. We don`t have the resources to extend Apparmor as far as this; do we?. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

19:02

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c20 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |suse-beta@cboltz.de --- Comment #20 from Christian Boltz 2011-03-30 21:02:46 CEST --- (In reply to comment #19)

I believe we should have disabled all the apparmor profiles that don`t work for the 11.4 release by default.

Every program that can be configured by the user won't fit then because you'll always find a config that needs to access another file... Well, maybe except /bin/false and /bin/true ;-) As long as the profile fits at least 95% of the users, I'd say we should keep it.

Perhaps we find someone who can reliably test through all of them.

See above - the problems are often caused by configuration changes. Therefore I'd say heavy users of $program (who also change the config a lot) are the best testers. This also means you won't find one person that can test all profiles.

Let auditd mirror all apparmor access denial messages to the console where the program runs by default.

Interesing idea.

To me personally if I consider it again approaching to deploy SELinux does also become increasingly interesting since it now offers protection for Xorg which Apparmor does not. An in deed curcial component on every graph. desktop system. We don`t have the resources to extend Apparmor as far as this; do we?.

That's something you should ask on the apparmor@lists.ubuntu.com mailinglist where all the AppArmor developers are. (subscribe at https://lists.ubuntu.com/mailman/listinfo/apparmor ) AFAIK Jeff is the only one @Novell who works on AppArmor (beside many other things), and in the openSUSE community there isn't too much activity regarding AppArmor. Well, at least I maintain the vim syntax highlighting for the profiles and sometimes comment on planned changes on the AppArmor mailinglist - but trust me: it's a good thing that I don't touch any C code in AppArmor or elsewhere ;-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

13 Apr 13 Apr

20:02

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c21 Jeff Mahoney changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |meissner@novell.com --- Comment #21 from Jeff Mahoney 2011-04-13 20:02:32 UTC --- (In reply to comment #17)

I think it's going to work better to ship dhclient-script as unconfined and let users who want to confine it create a profile. A shell script that handles plugins is going to touch lots of things.

Marcus, do you have an opinion here? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

15 Apr 15 Apr

13:28

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c22 Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW CC| |meissner@novell.com InfoProvider|meissner@novell.com | --- Comment #22 from Marcus Meissner 2011-04-15 13:28:28 UTC --- if it is breaking for some setups we should leave it not default enabled. we could do let it call netconfig unconfined, but this would make it quite useless. so its ok to turn off, but keep in the samples directory for admin usage. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

18 Apr 18 Apr

20:09

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c23 --- Comment #23 from Christian Boltz 2011-04-18 22:09:51 CEST --- If I get it right (I don't know the internals of netconfig and dhclient), the problem is that admins can put various scripts in /etc/netconfig.d/, which are then executed. What about using a rule with fallback permissions like /etc/netconfig.d/** PUxr, This means: If an AppArmor profile exists for a script, it is used; otherwise the script runs unconfined. Note: I never used PUx rules, therefore please test it before shipping a profile with it. I'm not even sure which version of AppArmor introduced the PUx rules, but 2.5.1 on 11.4 seems to support it. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

19 Oct 19 Oct

12:24

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|jeffm@suse.com |suse-beta@cboltz.de -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

16 Jan 16 Jan

18:01

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard| |maint:running:50809:moderat | |e -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

21 Jan 21 Jan

17:22

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:50809:moderat |. |e | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

18:06

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|. |maint:running:50809:moderat | |e -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

31 Jan 31 Jan

20:05

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c24 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:50809:moderat |maint:running:50809:moderat |e |e | |maint:released:sle11-sp2:50 | |817 --- Comment #24 from Swamp Workflow Management 2013-01-31 20:05:15 UTC --- Update released for: apparmor-profiles Products: SLE-DESKTOP 11-SP2 (i386, x86_64) SLE-SERVER 11-SP2 (i386, ia64, ppc64, s390x, x86_64) SLES4VMWARE 11-SP2 (i386, x86_64) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

23:46

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:50809:moderat |maint:released:sle11-sp2:50 |e |817 |maint:released:sle11-sp2:50 | |817 | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

20 Oct 20 Oct

18:09

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

https://bugzilla.novell.com/show_bug.cgi?id=561152 https://bugzilla.novell.com/show_bug.cgi?id=561152#c25 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |WORKSFORME --- Comment #25 from Christian Boltz 2013-10-20 20:09:27 CEST --- (In reply to comment #22)

so its ok to turn off, but keep in the samples directory for admin usage.

I just re-checked this: # rpm -ql apparmor-profiles |grep dhclient /etc/apparmor/profiles/extras/sbin.dhclient /etc/apparmor/profiles/extras/sbin.dhclient-script In other words: those profiles are not enabled by default. Therefore I'll close this bug - if someone disagrees, feel free to reopen ;-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

bugzilla_noreply＠novell.com

15 Apr 15 Apr

10:36

New subject: [Bug 561152] root cause seems to prevent dhclient from opening /proc/net/dev

http://bugzilla.novell.com/show_bug.cgi?id=561152 http://bugzilla.novell.com/show_bug.cgi?id=561152#c26 --- Comment #26 from Bernhard Wiedemann --- This is an autogenerated message for OBS integration: This bug (561152) was mentioned in https://build.opensuse.org/request/show/59942 Factory / apparmor -- You are receiving this mail because: You are on the CC list for the bug.

Reply

Sign in to reply online Use email software

2940

Age (days ago)

5263

Last active (days ago)

Download

33 comments

1 participants

tags

participants (1)

bugzilla_noreply＠novell.com