[Bug 746506] New: Apparmor service unknown
https://bugzilla.novell.com/show_bug.cgi?id=746506 https://bugzilla.novell.com/show_bug.cgi?id=746506#c0 Summary: Apparmor service unknown Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: VMWare OS/Version: openSUSE 12.1 Status: NEW Severity: Major Priority: P5 - None Component: Other AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: carlos.e.r@opensuse.org QAContact: qa@suse.de Found By: --- Blocker: --- Apparmor service unknown systemv: Elanor:~ # chkconfig apparmor apparmor: unknown service Elanor:~ # rcapparmor Usage: /sbin/rcapparmor {start|stop|restart|try-restart|reload|force-reload|status|kill} Elanor:~ # systemv: Elanor:~ # chkconfig apparmor apparmor: unknown service Elanor:~ # Yast services configuration also does not displays an entry for AA. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=746506 https://bugzilla.novell.com/show_bug.cgi?id=746506#c zj jia <zjjia@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |zjjia@suse.com AssignedTo|bnc-team-screening@forge.pr |jeffm@suse.com |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=746506 https://bugzilla.novell.com/show_bug.cgi?id=746506#c1 Neven Lovrić <neven@lovric.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |neven@lovric.net --- Comment #1 from Neven Lovrić <neven@lovric.net> 2012-02-18 21:12:53 UTC --- When I try to disable AppArmor in the Yast2 GUI or the Yast2 ncurses interface, nothing happens. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=746506 https://bugzilla.novell.com/show_bug.cgi?id=746506#c2 --- Comment #2 from Jeff Mahoney <jeffm@suse.com> 2012-05-01 11:27:35 EDT --- The chkconfig issuse is because the AppArmor init script is called boot.apparmor. sled1:~ # chkconfig boot.apparmor boot.apparmor on AppArmor can be disabled in Yast in Expert Mode but doesn't come up in the regular interface because it's a boot level service. None of the boot level services are display in the "Simple Mode" yast runlevel editor. I'm not sure what to do about the boot.apparmor inconsistency. On one hand, there seems to be a convention to naming boot-level service files with a boot prefix. On the other hand, it's the only boot-level service to have a matching /sbin/rc* script. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=746506 https://bugzilla.novell.com/show_bug.cgi?id=746506#c3 Jeff Mahoney <jeffm@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jeffm@suse.com AssignedTo|jeffm@suse.com |suse-beta@cboltz.de --- Comment #3 from Jeff Mahoney <jeffm@suse.com> 2012-08-09 19:12:49 EDT --- It should be possible to just rename boot.apparmor to apparmor so that it appears in chkconfig and yast without using the expert modes for either. The hard part is ensuring that an update works as expected so that the state of it being enabled or disabled is preserved. Bouncing to the apparmor maintainer. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=746506 https://bugzilla.novell.com/show_bug.cgi?id=746506#c4 Christian Boltz <suse-beta@cboltz.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |fcrozat@suse.com --- Comment #4 from Christian Boltz <suse-beta@cboltz.de> 2012-08-10 14:19:28 CEST --- (In reply to comment #1)
When I try to disable AppArmor in the Yast2 GUI or the Yast2 ncurses interface, nothing happens.
That might be a bug in YaST. Please open a separate bugreport for YaST and attach the y2logs. Please also add me to CC. (In reply to comment #2)
sled1:~ # chkconfig boot.apparmor boot.apparmor on
Exactly - that's what you need to use on 12.1 and 12.2.
I'm not sure what to do about the boot.apparmor inconsistency. On one hand, there seems to be a convention to naming boot-level service files with a boot prefix. On the other hand, it's the only boot-level service to have a matching /sbin/rc* script.
Indeed, it's an interesting[tm] question. I tend to keep the boot.apparmor name - sometimes it's better to keep a slightly inconsistent, but well-known name than to "fix" it (needless to say that handling the renaming on upgrades will be funny[tm]) and confuse long-time users ;-) BTW: With systemd, you don't need the "boot." prefix to start, reload etc. AppArmor: # systemctl reload apparmor.service Interestingly, for systemctl enable/disable, you still need the prefix: # systemctl disable apparmor.service Failed to issue method call: No such file or directory # systemctl enable boot.apparmor.service boot.apparmor.service is not a native service, redirecting to /sbin/chkconfig. Executing /sbin/chkconfig boot.apparmor on Frederic, what's the reason for this (IMHO) inconsistent behaviour? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=746506 https://bugzilla.novell.com/show_bug.cgi?id=746506#c5 Frederic Crozat <fcrozat@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW CC| |fcrozat@suse.com InfoProvider|fcrozat@suse.com | --- Comment #5 from Frederic Crozat <fcrozat@suse.com> 2012-08-10 12:48:13 UTC --- I think this inconsistency is coming from the fact enabling / disabling non systemd services (ie initscripts) is deletaged to chkconfig. "boot.*" services are handled in a separate location in systemd, just to add an additional dependency on sysvinit.target (to make sure they are really booted before others). Maybe we could improve this behaviour for enable / disable (hoping there isn't services providing a boot.foobar and foobar initscripts otherwise it won't be possible to discriminate them) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=746506 https://bugzilla.novell.com/show_bug.cgi?id=746506#c6 --- Comment #6 from Jeff Mahoney <jeffm@suse.com> 2012-08-10 09:36:18 EDT --- Christian, it's not a YaST bug, it's by design. Services that match boot.* are only available in expert mode. The only way to make the service available to chkconfig and yast non-expert mode is to rename the script to just 'apparmor.' Incidentally, the scripts on other distros *are* just named 'apparmor.' -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=746506 https://bugzilla.novell.com/show_bug.cgi?id=746506#c7 --- Comment #7 from Carlos Robinson <carlos.e.r@opensuse.org> 2012-08-10 14:13:32 UTC --- (In reply to comment #2)
I'm not sure what to do about the boot.apparmor inconsistency. On one hand, there seems to be a convention to naming boot-level service files with a boot prefix. On the other hand, it's the only boot-level service to have a matching /sbin/rc* script.
bombadillo:~ # which rccrypto /sbin/rccrypto bombadillo:~ # l /sbin/rccrypto lrwxrwxrwx 1 root root 23 Aug 7 02:43 /sbin/rccrypto -> /etc/init.d/boot.crypto* bombadillo:~ # :-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=746506 https://bugzilla.novell.com/show_bug.cgi?id=746506#c8 --- Comment #8 from Jeff Mahoney <jeffm@suse.com> 2012-08-10 10:20:30 EDT --- Hehe ok, the only one on my workstation. ;) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=746506 https://bugzilla.novell.com/show_bug.cgi?id=746506#c9 Christian Boltz <suse-beta@cboltz.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |fcrozat@suse.com --- Comment #9 from Christian Boltz <suse-beta@cboltz.de> 2012-08-10 18:56:43 CEST --- (In reply to comment #5)
I think this inconsistency is coming from the fact enabling / disabling non systemd services (ie initscripts) is deletaged to chkconfig. [...]
Maybe we could improve this behaviour for enable / disable (hoping there isn't services providing a boot.foobar and foobar initscripts otherwise it won't be possible to discriminate them)
Given the fact that they can^Wmust be started/stopped/reloaded without the "boot." prefix (where you could have the same name conflicts), I'd say it makes sense to do the same for enable and disable ;-) Do you want a separate bugreport/enhancement request for systemd? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=746506 https://bugzilla.novell.com/show_bug.cgi?id=746506#c10 Frederic Crozat <fcrozat@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|fcrozat@suse.com | --- Comment #10 from Frederic Crozat <fcrozat@suse.com> 2012-08-23 11:38:04 UTC --- (In reply to comment #9)
(In reply to comment #5)
I think this inconsistency is coming from the fact enabling / disabling non systemd services (ie initscripts) is deletaged to chkconfig. [...]
Maybe we could improve this behaviour for enable / disable (hoping there isn't services providing a boot.foobar and foobar initscripts otherwise it won't be possible to discriminate them)
Given the fact that they can^Wmust be started/stopped/reloaded without the "boot." prefix (where you could have the same name conflicts), I'd say it makes sense to do the same for enable and disable ;-)
Do you want a separate bugreport/enhancement request for systemd?
I've fixed this in systemd for 12.2 (currently in home:fcrozat:branches:Base:System/systemd, should land soon in Base:System and 12.2) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=746506 https://bugzilla.novell.com/show_bug.cgi?id=746506#c11 --- Comment #11 from Bernhard Wiedemann <bwiedemann@suse.com> 2012-08-26 00:00:07 CEST --- This is an autogenerated message for OBS integration: This bug (746506) was mentioned in https://build.opensuse.org/request/show/131610 Factory / systemd -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=746506 https://bugzilla.novell.com/show_bug.cgi?id=746506#c12 Christian Boltz <suse-beta@cboltz.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #12 from Christian Boltz <suse-beta@cboltz.de> 2013-01-06 12:57:22 CET --- The correct resolution for this bug would be 50% FIXED and 50% WONTFIX ;-) 50% FIXED because "systemctl enable apparmor.service" and "systemctl disable apparmor.service" now work (see comment #11). 50% WONTFIX because chkconfig still requires "boot.apparmor". The reasons for WONTFIX are: - it worked this way since ever AFAIK, so changing it would confuse users - the problem will go away when AppArmor comes with a native systemd .service file (which I'll probably add after the 12.3 release) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com