[Bug 408846] New: logprof asks the same questions ever again
https://bugzilla.novell.com/show_bug.cgi?id=408846 Summary: logprof asks the same questions ever again Product: openSUSE 11.0 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor AssignedTo: jjohansen@novell.com ReportedBy: poeml@novell.com QAContact: qa@suse.de Found By: --- I am profiling a program called climm. logprof asks some questions and adds stuff to the profile. However, on next run it asks the same questions again. Here are two logprof calls in a row: # logprof Reading log entries from /var/log/audit/audit.log. Updating AppArmor profiles in /etc/apparmor.d. Complain-mode changes: Profile: /usr/bin/climm Network Family: inet Socket Type: dgram [(A)llow] / (D)eny / Audi(t) / Abo(r)t / (F)inish Adding network access inet dgram to profile. Profile: /usr/bin/climm Network Family: inet Socket Type: stream [(A)llow] / (D)eny / Audi(t) / Abo(r)t / (F)inish Adding network access inet stream to profile. = Changed Local Profiles = The following local profiles were changed. Would you like to save them? [1 - /usr/bin/climm] (S)ave Changes / [(V)iew Changes] / Abo(r)t Writing updated profile for /usr/bin/climm. logprof 6.22s user 0.16s system 61% cpu 10.302 total # logprof Reading log entries from /var/log/audit/audit.log. Updating AppArmor profiles in /etc/apparmor.d. Complain-mode changes: Profile: /usr/bin/climm Network Family: inet Socket Type: dgram [(A)llow] / (D)eny / Audi(t) / Abo(r)t / (F)inish Adding network access inet dgram to profile. Profile: /usr/bin/climm Network Family: inet Socket Type: stream [(A)llow] / (D)eny / Audi(t) / Abo(r)t / (F)inish Adding network access inet stream to profile. = Changed Local Profiles = The following local profiles were changed. Would you like to save them? [1 - /usr/bin/climm] (S)ave Changes / [(V)iew Changes] / Abo(r)t Writing updated profile for /usr/bin/climm. logprof 6.37s user 0.12s system 46% cpu 14.063 total # auditd logs a line like type=APPARMOR_STATUS msg=audit(1216033907.231:2557): operation="profile_replace" name="/usr/bin/climm" name2="default" pid=25733 after each logprof run. The changes that logprof shows when I press 'v' before saving are: --- /tmp/NXcujx1vdY 2008-07-14 13:13:02.439680588 +0200 +++ /tmp/MtSGHhrg1v 2008-07-14 13:13:02.439680588 +0200 @@ -5,6 +5,8 @@ #include <abstractions/nameservice> network dgram, + network inet dgram, + network inet stream, network stream, owner /home/*/.climm/** rw, /tmp/a8P9SzyBZf lines 1-11/11 (END) logprof actually added those lines to the profile: # cat *climm* # Last Modified: Mon Jul 14 13:11:47 2008 #include <tunables/global> /usr/bin/climm { #include <abstractions/base> #include <abstractions/nameservice> network dgram, network inet dgram, network inet stream, network stream, owner /home/*/.climm/** rw, /usr/bin/climm r, /usr/share/climm/* r, /var/run/utmp rk, } But it doesn't seem to see them when parsing, maybe? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=408846 User jjohansen@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=408846#c1 John Johansen <jjohansen@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #1 from John Johansen <jjohansen@novell.com> 2008-07-14 17:35:19 MDT --- Hrmm, possible but it would seem more likely to me that it failed to update the profile the first time. Can you duplicate? And if so can you check the profile in between runs? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=408846 User poeml@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=408846#c2 --- Comment #2 from Peter Poeml <poeml@novell.com> 2008-07-15 04:04:41 MDT --- The profile for e.g. climm contains network dgram, network inet dgram, network inet stream, network stream, since logprof asked for it the first time. Since then, it asks each time to add "network inet dgram" and "network inet stream", and the profile file doesn't change anymore since then. But the diff that logprof presents each time presents those two lines as new lines, just as if they were not in the profile at all. The same happens for sshd by the way, with a different line. logprof proposes this change: --- /tmp/eCgkU5ijB3 2008-07-15 12:03:46.011679855 +0200 +++ /tmp/hI0aiQrXVw 2008-07-15 12:03:46.011679855 +0200 @@ -31,6 +31,7 @@ capability sys_tty_config, + /bin/ash Ux, /bin/bash Ux, /bin/bash2 Ux, @@ -55,9 +56,11 @@ /tmp/ssh-*/agent.[0-9]* rwl, /tmp/ssh-*[0-9]*/ w, /usr/sbin/sshd mrix, + owner /var/log/wtmp k, owner /var/log/wtmp w, /var/run w, /var/run/sshd{,.init}.pid wl, + owner /var/run/utmp k, owner /var/run/utmp rw, @{HOME}/.ssh/authorized_keys{,2} r, @{PROC}/[0-9]*/fd/ r, and if I confirm that, it proposes it again the next time (even though it has saved the changes to disk (I verified this). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=408846 User jjohansen@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=408846#c3 --- Comment #3 from John Johansen <jjohansen@novell.com> 2008-07-15 14:01:53 MDT --- can you attach the results of ls -a /etc/apparmor.d/ -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=408846 User suse-beta@cboltz.de added comment https://bugzilla.novell.com/show_bug.cgi?id=408846#c5 Christian Boltz <suse-beta@cboltz.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |suse-beta@cboltz.de --- Comment #5 from Christian Boltz <suse-beta@cboltz.de> 2008-09-07 15:24:52 MDT --- I see the same behaviour with the /usr/lib/postfix/master profile :-( (I have already have my profiles some days ago on request after my mail on apparmor-general) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=408846 User suse-beta@cboltz.de added comment https://bugzilla.novell.com/show_bug.cgi?id=408846#c6 --- Comment #6 from Christian Boltz <suse-beta@cboltz.de> 2008-09-07 15:46:18 MDT --- (In reply to comment #5 from Christian Boltz)
I see the same behaviour with the /usr/lib/postfix/master profile :-( (I have already have my profiles some days ago on request after my mail on apparmor-general)
Should read "I have already sent you my profiles..." :-/ -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=408846 User jjohansen@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=408846#c7 --- Comment #7 from John Johansen <jjohansen@novell.com> 2008-09-08 06:21:40 MDT --- yes, thanks for the profiles. I have been trying to track this one down, but haven't found it yet. However I have managed to fix its twin that would result in certain path rules being prompted forever. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=408846 Jeff Mahoney <jeffm@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|jeffm@novell.com |tonyj@novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com