https://bugzilla.novell.com/show_bug.cgi?id=629882 https://bugzilla.novell.com/show_bug.cgi?id=629882#c2 Martin Vidner <mvidner@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|YaST reads YCP include |YaST reads YCP include |files 1 byte at a time |files 1 byte at a time, | |AppArmor(auditd) logs it | |all slow as hell --- Comment #2 from Martin Vidner <mvidner@novell.com> 2010-08-24 14:08:46 CEST --- It turns out AppArmor was set up to complain about yast, by this profile: /etc/apparmor.d/sbin.yast2 : # Last Modified: Mon Oct 26 23:07:05 2009 # REPOSITORY: http://apparmor.opensuse.org/backend/api thebahdness 4106 #include <tunables/global> /sbin/yast2 flags=(complain) { #include <abstractions/base> #include <abstractions/bash> /bin/bash ix, } That made auditd fill (and rotate away) all of /var/log/audit/audit.log with messages like type=APPARMOR_ALLOWED msg=audit(1282649559.788:165674): operation="file_perm" pid=6304 parent=6271 profile="/sbin/yast2//null-120" requested_mask="r::" denied_mask="r::" fsuid=0 ouid=0 name="/usr/share/YaST2/include/nfs/ui.ycp" -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.