http://bugzilla.opensuse.org/show_bug.cgi?id=1195463 http://bugzilla.opensuse.org/show_bug.cgi?id=1195463#c18 --- Comment #18 from Noel Power <nopower@suse.com> --- (In reply to Christian Boltz from comment #15)
I'd also be interested in an audit.log that includes reloading the samba-bgqd profile multiple times and in multiple cases? Please first read the "Crazy idea" at the end, then run
sha256sum /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log rcapparmor reload sha256sum /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log echo "zypper up" >> /var/log/audit/audit.log zypper up # or whatever you need to install your updated AppArmor packages sha256sum /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log rcapparmor reload sha256sum /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log echo "samba-bgqd cache deleted" >> /var/log/audit/audit.log rm -v /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log rcapparmor reload sha256sum /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log
With this log spamming ;-) audit.log should show where things break. /var/log/zypp/history (the section with installing your updated AppArmor packages is enough) might also be helpful.
Crazy idea, since you already have your own branch packages: can you please add sha256sum /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log sleep 5 in %post of apparmor-parser, apparmor-profiles and apparmor-abstractions before doing the above test? That sha256sum+sleep should be the last thing %post does.
(wild guess: both -profiles and -abstractions reload the profiles, and I wonder if that could be part of the problem. The first one triggers cache generation, and second one changes a file in /etc - with same timestamp as all packaged profiles, so that the cache doesn't get regenerated.)
gonna attach files for this, I followed the instructions above but additionally started and stopped rcsmb e.g. zypper up # or whatever you need to install your updated AppArmor packages => echo "##### starting smbd" >> /var/log/audit/audit.log => rcsmb start => echo "##### stopping smbd" >> /var/log/audit/audit.log => rcsmb stop sha256sum /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log -- You are receiving this mail because: You are on the CC list for the bug.