Comment # 18 on bug 1195463 from Noel Power

(In reply to Christian Boltz from comment #15)

> I'd also be interested in an audit.log that includes reloading the
> samba-bgqd profile multiple times and in multiple cases? Please first read
> the "Crazy idea" at the end, then run
> 
> sha256sum /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log
> rcapparmor reload
> sha256sum /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log
> echo "zypper up" >> /var/log/audit/audit.log
> zypper up  # or whatever you need to install your updated AppArmor packages
> sha256sum /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log
> rcapparmor reload
> sha256sum /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log
> echo "samba-bgqd cache deleted" >> /var/log/audit/audit.log
> rm -v /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log
> rcapparmor reload
> sha256sum /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log
> 
> With this log spamming ;-) audit.log should show where things break.
> /var/log/zypp/history (the section with installing your updated AppArmor
> packages is enough) might also be helpful.
> 
> Crazy idea, since you already have your own branch packages: can you please
> add 
>     sha256sum /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log
>     sleep 5
> in %post of apparmor-parser, apparmor-profiles and apparmor-abstractions
> before doing the above test? That sha256sum+sleep should be the last thing
> %post does.
> 
> (wild guess: both -profiles and -abstractions reload the profiles, and I
> wonder if that could be part of the problem. The first one triggers cache
> generation, and second one changes a file in /etc - with same timestamp as
> all packaged profiles, so that the cache doesn't get regenerated.)

gonna attach files for this, I followed the instructions above but additionally
started and stopped rcsmb  e.g.

  zypper up  # or whatever you need to install your updated AppArmor packages

=> echo "##### starting smbd" >> /var/log/audit/audit.log
=> rcsmb start
=> echo "##### stopping smbd" >> /var/log/audit/audit.log
=> rcsmb stop

sha256sum /var/cache/apparmor/*/samba-bgqd >> /var/log/audit/audit.log