Hello, Am Donnerstag, 9. Oktober 2014 schrieb Claudio Freire:
On Thu, Oct 9, 2014 at 7:12 AM, alanbortu
wrote: Another isssue, when I run aa-genprof firefox, do some actions, scan the logs and finish, all I get is this: http://paste.opensuse.org/view/raw/87541501
I have tried all sorts of things but no matter what I do, I get a basic profile like that which is so strict I cannot even start firefox when in enforce mode. Any ideas on what is going on? Will file a bug later today after work but figured I should ask for input before doing so. I guess it's because what you run with "firefox" is a wrapper (didn't know that, just found out, huh):
~> which firefox /usr/bin/firefox ~> file /usr/bin/firefox /usr/bin/firefox: symbolic link to `../lib64/firefox/firefox.sh' ~> cat /usr/lib64/firefox/firefox.sh
aa-genprof already noticed that - the profile was created for the symlink target /usr/lib64/firefox/firefox.sh
I suggest you do aa-genprof /usr/lib64/firefox/firefox
In theory, aa-genprof should catch it when another binary is executed, and ask in which mode it should be executed. In practise, aa-genprof just generated a very basic profile [1], but didn't add any rules besides that. I'm not surprised that firefox won't run with this profile ;-) Can you please run aa-genprof firefox again and, if it still/again fails, paste the screen log of the whole aa-genprof run? (Just to be sure - you pressed "s" for "(S)can sytem log" in aa-genprof at least once before pressing "f" for (F)inish?) Regards, Christian Boltz [1] in case you are interested - it internally calls aa-autodep --
beim Übersetzen von qcad steigt die Prozessorauslastung von cc1plus bis auf 98% an. Dasist doch nicht üblich, oder? Warum stört Dich das? Du hast doch die ganze CPU bezahlt, oder? Oder hast Du nur 'ne halbe? [> Stefan Schlörholz und Andreas Kyek in suse-linux]
-- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org