https://bugzilla.novell.com/show_bug.cgi?id=629882
https://bugzilla.novell.com/show_bug.cgi?id=629882#c2
Martin Vidner changed:
What |Removed |Added
----------------------------------------------------------------------------
Summary|YaST reads YCP include |YaST reads YCP include
|files 1 byte at a time |files 1 byte at a time,
| |AppArmor(auditd) logs it
| |all slow as hell
--- Comment #2 from Martin Vidner 2010-08-24 14:08:46 CEST ---
It turns out AppArmor was set up to complain about yast, by this profile:
/etc/apparmor.d/sbin.yast2 :
# Last Modified: Mon Oct 26 23:07:05 2009
# REPOSITORY: http://apparmor.opensuse.org/backend/api thebahdness 4106
#include
/sbin/yast2 flags=(complain) {
#include
#include
/bin/bash ix,
}
That made auditd fill (and rotate away) all of /var/log/audit/audit.log with
messages like
type=APPARMOR_ALLOWED msg=audit(1282649559.788:165674): operation="file_perm"
pid=6304 parent=6271 profile="/sbin/yast2//null-120" requested_mask="r::"
denied_mask="r::" fsuid=0 ouid=0 name="/usr/share/YaST2/include/nfs/ui.ycp"
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.