Hello, sorry for answering that late - I didn't have the time to read the factory list since some time :-/ on Mittwoch, 29. September 2010, Peter Czanik wrote: [AppArmor profile updated by logprof]
Well, it did not work out as expected. First I did some hand tuning, so base syslog-ng and SCL without system(); works as expected:
logprof made the following modifications: [...] + ^null-36 { + owner /dev/tty rw, + owner /etc/ld.so.cache r, + owner /lib/lib*so* mr,
Looks like the (in 11.2 and 11.3) well-known problem that the AppArmor utils don't fully understand the changed log format. The main problem is that it doesn't understand execute events and then creates funny null-xy hats... The above should have been some type of *x (execute) permission, and maybe a child profile (or an external profile) for the program that is executed. The date of your mail is very near to the initial commit date of the AppArmor 2.5 package, so you probably had the ancient package when updating the profile. Please try again (with the latest AppArmor package) and if you don't get a working profile, force someone to fix https://bugzilla.novell.com/show_bug.cgi?id=546618 ;-) (and/or find someone to fix it for 11.2 and 11.3 *g*) Regards, Christian Boltz -- [Fontlinge] Nun zunächst mal kann Bill seine Fonts per Hand sortieren, Bätsch. Und er muß Millionen trauriger Menschen erklären, wieso das unter Linux geht und unter Windows nicht. Und dann kaufen alle Leute Linux-Distris, und Bill geht pleite und muß hungern, und ich reite in den Sonnenuntergang. [Ratti in suse-programming] -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org