http://bugzilla.opensuse.org/show_bug.cgi?id=1120472
http://bugzilla.opensuse.org/show_bug.cgi?id=1120472#c9
--- Comment #9 from Christian Boltz
(In reply to Christian Boltz from comment #4)
... To sum it up - the conditions to trigger this error are: - nscd is running under the "wrong" profile name ("/usr/sbin/nscd") and triggered audit.log entries with this profile name - a file "usr.sbin.nscd" file exists (that's the default filename for the /usr/sbin/nscd profile) - in that file, the profile name is _not_ "/usr/sbin/nscd"
The profile in usr.sbin.nscd got a profile name "nscd" (which does not exist before), that maybe the reason why we saw it is on "nscd" in the status.
Right, that's exactly the reason. BTW: When openQA deletes the profile and lets aa-autodep or aa-genprof generate a new one, it will be named "/usr/sbin/nscd".
I'm going to see how to modify the test script to better match what we want to test.
IMHO you need to unload the nscd profile from the kernel before deleting it, see comment #4 for details. Also, when testing with the shipped profile, you'll have to expect "nscd" as profile name.
(In reply to Christian Boltz from comment #1)
...
I just tried to reproduce the issue locally by doing what openQA does, but (un)fortunately aa-logprof "just works" as expected.
The current Tumbleweed version has not been rolled to what openQA was running, I guess. You probably need a factory build for testing.
No worries, I tested with a new-enough package ;-) and comment #4 (starting at "Let me explain" explains why I initially wasn't able to reproduce the problem. -- You are receiving this mail because: You are on the CC list for the bug.