http://bugzilla.novell.com/show_bug.cgi?id=510740 User suse-beta@cboltz.de added comment http://bugzilla.novell.com/show_bug.cgi?id=510740#c2 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|suse-beta@cboltz.de | --- Comment #2 from Christian Boltz 2009-10-16 01:44:32 CEST --- I just tested this on three 11.1 servers - two (always) show the error message on a "rcapparmor restart", the other never does (tested 5 times on each server to be sure it happens every time). /sys/kernel/security is mounted on all servers - this probably means there _is_ another way that causes this error message ;-) Thinking about it, the two servers that show the error message share nearly the same set of profiles. I just addded some debugging code and found out it only happens on my /usr/lib/postfix/local profile. /usr/lib/postfix/local { #include [...] profile "^/usr/lib/postfix/local " { /usr/lib/mailman/mail/mailman Px, } } Needless to say that this sub-profile looks a bit strange. I especially wonder about the space at the end of the name. (The question why this sub-profile exists at all is another issue, but I have no idea about this.) After running "rcapparmor stop", the strange subprofile is still loaded: # cat /sys/kernel/security/apparmor/profiles /usr/lib/postfix/local//^/usr/lib/postfix/local (enforce) The script echo's "/usr/lib/postfix/local//^/usr/lib/postfix/local" (without space!) to /sys/kernel/security/apparmor/.remove I just verified that this really causes the error message by removing the sub-profile and calling echo -n '/usr/lib/postfix/local//^/usr/lib/postfix/local ' > /sys/kernel/security/apparmor/.remove Now rcapparmor restart works without the error message. -> the space must be lost somewhere - maybe there's variable quoting missing somewhere in the script. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=510740 User jeffm@novell.com added comment http://bugzilla.novell.com/show_bug.cgi?id=510740#c4 Jeff Mahoney changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #4 from Jeff Mahoney 2009-10-15 18:47:49 MDT --- Great! Thanks for the debugging effort. I'll work this into the package tomorrow morning. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=510740 http://bugzilla.novell.com/show_bug.cgi?id=510740#c6 Jeff Mahoney changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |aj@novell.com, | |ast@novell.com --- Comment #6 from Jeff Mahoney 2010-03-15 19:35:41 UTC --- I've submitted fixes for SLE11 SP1 and openSUSE 11.2. openSUSE 11.1 is out of scope. Anja, I have three fixes queued up for apparmor-parser. SR 34867 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=510740 http://bugzilla.novell.com/show_bug.cgi?id=510740#c7 Christian Dengler changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED CC| |cdengler@novell.com Info Provider|ast@novell.com | --- Comment #7 from Christian Dengler 2010-03-17 12:07:28 UTC --- ok, we so kind and submit a patchinfo for 11.2; swampID: 32010 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=510740 http://bugzilla.novell.com/show_bug.cgi?id=510740#c9 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:32010 |maint:running:32010 | |maint:released:11.2:32215 --- Comment #9 from Swamp Workflow Management 2010-04-06 11:53:43 UTC --- Update released for: apparmor-parser, apparmor-parser-debuginfo, apparmor-parser-debugsource, apparmor-utils Products: openSUSE 11.2 (debug, i586, x86_64) -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=510740 https://bugzilla.novell.com/show_bug.cgi?id=510740#c10 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- Component|AppArmor |AppArmor Version|Final |Factory Product|openSUSE 11.1 |openSUSE 11.3 --- Comment #10 from Christian Boltz 2010-11-27 22:53:17 CET --- Unfortunately this fix was lost again in 11.3 :-( A update just for this would be exaggeratedly, but you should include it if you ever release an update for apparmor-parser on 11.3. More important: The 2.5.1 packages in security:apparmor also miss this fix - please apply the fix from comment #3 there! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=510740 https://bugzilla.novell.com/show_bug.cgi?id=510740#c11 Alexandr Mityunin changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |avm-xandry@yandex.ru --- Comment #11 from Alexandr Mityunin 2010-11-28 06:22:11 UTC --- I'm replaced line 434 /lib/apparmor/rc.apparmor.functions on + sort "$PNAMES_LIST" | comm -2 -3 "$MODULE_PLIST" - | while IFS= read profile ; do # ignore the line break in bugzilla but now i see new error:

sudo /etc/init.d/boot.apparmor start /lib/apparmor/rc.apparmor.functions: line 439: syntax error near unexpected token `;' /lib/apparmor/rc.apparmor.functions: line 439: ` ; do # ignore the line break in bugzilla' /lib/apparmor/rc.apparmor.functions: line 345: configure_owlsm: command not found Loading AppArmor profiles done

done What's wrong? P.S.: openSUSE 11.3

susepaste /lib/apparmor/rc.apparmor.functions Pasted as: http://susepaste.org/57531528

-- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=510740 https://bugzilla.novell.com/show_bug.cgi?id=510740#c13 --- Comment #13 from Alexandr Mityunin 2010-11-29 11:50:30 UTC --- (In reply to comment #12) You are right. Thanks.

...

http://susepaste.org/57531528 gives me a "404 not found" :-(

Yeah, me too. :) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=510740 https://bugzilla.novell.com/show_bug.cgi?id=510740#c15 Jeff Mahoney changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |maintenance@opensuse.org --- Comment #15 from Jeff Mahoney 2010-12-01 19:00:55 UTC --- openSUSE 11.3 SR 54281 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=510740 https://bugzilla.novell.com/show_bug.cgi?id=510740#c17 Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|. |. maint:running:37584:low --- Comment #17 from Swamp Workflow Management 2010-12-03 15:51:10 UTC --- The SWAMPID for this issue is 37584. This issue was rated as low. Please submit fixed packages until 2010-12-31. Also create a patchinfo file using this link: https://swamp.suse.de/webswamp/wf/37584 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=510740 https://bugzilla.novell.com/show_bug.cgi?id=510740#c Swamp Workflow Management changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|. maint:running:37584:low |. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=510740 https://bugzilla.novell.com/show_bug.cgi?id=510740#c20 Christian Boltz changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |VERIFIED --- Comment #20 from Christian Boltz 2011-01-11 17:27:50 CET --- VERIFIED on 11.3 VERIFIED in apparmor-parser-2.5.1 from security:apparmor - which hopefully arrives in Factory soon (I've seen the mail about the pending SR on opensuse-factory) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.