Mailinglist Archive: opensuse (2459 mails)

< Previous Next >
Re: [opensuse] apparmor - long filename referenced in apparmor log that doesn't seem to exist
  • From: Marcus Meissner <meissner@xxxxxxx>
  • Date: Thu, 13 Mar 2008 10:50:40 +0100
  • Message-id: <20080313095040.GA3650@xxxxxxx>
On Wed, Mar 12, 2008 at 06:21:43PM -0600, rmyster@xxxxxxxxx wrote:
Does anyone have any suggestions on how one might to locate whatever
file is causing an apparmor log entry like below?

type=APPARMOR_DENIED msg=audit(1204240154.195:18362): type=1503
operation="inode_permission" requested_mask="r" denied_mask="r"
name=2F685F6D652F6E652F6E2F2E77696E652F64726973655F632F40726F6772616D2046396C65732F504F562D52317920666F722057696E646F76732076332E362F62696E2F7076656E67696E652E657865
pid=17502 profile="/opt/firefox/firefox-bin"

It references some long file but all attempts at locating the file
fail. Searching for both the full name and portions of the name with
either find(including the -samefile option) & grep shows nothing.
Creating a complete filelist of the entire hard drive using "du -a"
also shows no matching name.

In addition, while entries similar to above keep showing up in the
logs, there is no indication of it when running aa-logprof.

Well, there is ASCII code.

2F685F6D652F 6E652F 6E2F 2E 77696E652F
64726973655F632F40726F6772616D2046396C65732F504F562D52317920666F7220
57696E646F76732076332E362F62696E2F7076 656E 67 69 6E652E657865

translates too:
/home/ne/n/.wine/drive_c/@rogram F9les/POV-R1y for Windows v3.6/bin/pvengine.exe

The path looks a bit corrupted. Does it really exist?

Did you try running stuff with Wine?

Ciao, Marcus
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx

< Previous Next >
Follow Ups
References