[Bug 691072] New: Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

bugzilla_noreply＠novell.com

30 Apr 2011 30 Apr '11

21:37

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c0 Summary: Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail Classification: openSUSE Product: openSUSE 11.4 Version: Final Platform: Other OS/Version: openSUSE 11.4 Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor AssignedTo: jeffm@novell.com ReportedBy: joop.boonen@boonen.org QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:2.0.0) Gecko/20100101 Firefox/4.0 As Apparmor doesn't allow following symlinks (what I think should be like that). The mail files /var/spool/mail/* is missing in the apparmor profile files for dovecot. This is for dovecot 1.2.16. For dovecot 2.0.9 this profile isn't correct at all. I wonder if it would be an idea to separate the apparmor profiles partly from apparmor. And have separate apparmor profiles for different programs. With <packagename>-apparmor like for instance dovecot12-apparmor and dovecot20-apparmor. Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Show replies by date

bugzilla_noreply＠novell.com

30 Apr 30 Apr

21:39

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c1 --- Comment #1 from Joop Boonen 2011-04-30 21:39:35 UTC --- This bug is not related to: Bug 681267 as this bug is related to dovecot 2.0.9. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

26 May 26 May

15:45

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c2 --- Comment #2 from Jeff Mahoney 2011-05-26 15:45:24 UTC --- I'm afraid this isn't a "bug" per se. It's a shortcoming of pathname based access control. By adding a symlink, you've changed the name that the file is using to be accessed. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

28 Jul 28 Jul

00:33

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c3 --- Comment #3 from Joop Boonen 2011-07-28 00:32:59 UTC --- It's not so much of the symlink but of the path in the apparmor profile. As the path is not in the apparmor profile dovecot 2.o.9 doesn't start. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

00:42

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c Joop Boonen changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

2 Aug 2 Aug

19:41

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c4 Jeff Mahoney changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |maintenance@opensuse.org --- Comment #4 from Jeff Mahoney 2011-08-02 19:41:46 UTC --- My mistake. I didn't notice that the default system installed /var/mail as a symlink to /var/spool/mail. I thought it was a local change. I've committed the fix to security:apparmor:factory and openSUSE:11.4. 11.4 commit is SR 77729 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

4 Aug 4 Aug

13:01

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c5 Christian Dengler changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED CC| |cdengler@novell.com InfoProvider|maintenance@opensuse.org | --- Comment #5 from Christian Dengler 2011-08-04 13:01:11 UTC --- update is okay for me +1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

13:03

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c Christian Dengler changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |maintenance@opensuse.org -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

8 Aug 8 Aug

09:01

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c6 --- Comment #6 from Marcus Meissner 2011-08-08 09:01:35 UTC --- yes, ok +1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

9 Aug 9 Aug

12:34

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c7 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard| |maint:running:42559:low --- Comment #7 from Swamp Workflow Management 2011-08-09 12:34:04 UTC --- The SWAMPID for this issue is 42559. This issue was rated as low. Please submit fixed packages until 2011-09-06. Also create a patchinfo file using this link: https://swamp.suse.de/webswamp/wf/42559 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

12:34

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c Christian Dengler changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED InfoProvider|maintenance@opensuse.org | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

12 Aug 12 Aug

19:13

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c8 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |suse-beta@cboltz.de --- Comment #8 from Christian Boltz 2011-08-12 21:13:47 CEST --- (In reply to comment #4)

...

I've committed the fix to security:apparmor:factory and openSUSE:11.4.

Jeff, the dovecot profile patch is NOT in security:apparmor:factory :-( -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

23 Aug 23 Aug

11:59

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c9 --- Comment #9 from Christian Dengler 2011-08-23 11:59:11 UTC --- Jeff, should we release the update without this patch and include it into the next update or would you submit new sources? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

27 Aug 27 Aug

00:28

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c10 --- Comment #10 from Christian Boltz 2011-08-27 02:28:13 CEST --- (In reply to comment #9)

...

Jeff, should we release the update without this patch and include it into the next update or would you submit new sources?

I'm not Jeff, but: the patch is in 11.4:Update:Test already. It's "only" missing in security:apparmor:factory, but that's unrelated to the update. Therefore I'd say that you should release the update. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

30 Aug 30 Aug

15:14

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c11 --- Comment #11 from Christian Dengler 2011-08-30 15:14:51 UTC --- Okay, update released. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

15:15

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c12 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:42559:low |maint:running:42559:low | |maint:released:11.4:42593 --- Comment #12 from Swamp Workflow Management 2011-08-30 15:15:31 UTC --- Update released for: apache2-mod_apparmor, apache2-mod_apparmor-debuginfo, apparmor, apparmor-debugsource, apparmor-docs, apparmor-parser, apparmor-parser-debuginfo, apparmor-parser-lang, apparmor-profiles, apparmor-utils, apparmor-utils-lang, libapparmor-devel, libapparmor1, libapparmor1-debuginfo, pam_apparmor, pam_apparmor-debuginfo, perl-apparmor, perl-apparmor-debuginfo, tomcat_apparmor, tomcat_apparmor-debuginfo Products: openSUSE 11.4 (debug, i586, x86_64) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

15:16

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:42559:low |maint:released:11.4:42593 |maint:released:11.4:42593 | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

13 Sep 13 Sep

19:01

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c13 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|jeffm@suse.com |suse-beta@cboltz.de --- Comment #13 from Christian Boltz 2011-09-13 21:01:08 CEST --- For the records: fixed in upstream AppArmor 2.7 beta2, which will be released in the next days. I'll close the bug after submitting it to Factory. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

16 Sep 16 Sep

15:14

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c14 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #14 from Christian Boltz 2011-09-16 17:14:28 CEST --- Fixed in AppArmor 2.7 beta2, which I'll commit to Factory in some hours. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

17:00

New subject: [Bug 691072] Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

https://bugzilla.novell.com/show_bug.cgi?id=691072 https://bugzilla.novell.com/show_bug.cgi?id=691072#c15 --- Comment #15 from Bernhard Wiedemann 2011-09-16 19:00:25 CEST --- This is an autogenerated message for OBS integration: This bug (691072) was mentioned in https://build.opensuse.org/request/show/82501 Factory / apparmor -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

4610

Age (days ago)

4749

Last active (days ago)

List overview

Download

19 comments

1 participants

participants (1)

bugzilla_noreply＠novell.com

[Bug 691072] New: Apparmor profile prevents access to /var/mail = symlink to /var/spool/mail

tags

participants (1)