On 10/06/2020 23.51, Carlos E. R. wrote:
On 10/06/2020 22.08, Christian Boltz wrote:
Hello,
...
I'll try anyway... BINGO! It was AA. I removed the comment symbol, and now I have connectivity.
That's more than strange, and I'm sure that the # is/was not the cause (please re-add it and try again ;-)
Ok, will do. Is there a way to obtain a dump of the actual profile AA has loaded? If not, I can simply try to connect. Just not this minute.
Well, I did now (and restarted AA) and it is working. Paint me confused.
Wild guess: Maybe the real change was the timestamp of the profile - now it's newer than your previous cache file, and therefore the cache got rebuilt. (If you have a backup of the "broken" /etc/apparmor.d/ and /var/cache/apparmor/ with original timestamps, I'd be happy to debug this - but better off-list, it would be OT here.)
I don't know if I have. I did not make a backup, but if something takes one automatically it will be there.
During sleep (yeah, I dream with computers, it seems!) I thought about the editor backup. No, not even that. I did the operation with 'mc' (Midnight Commander) and by default it does not makes backups of edited files. I just changed that. For completeness, it is not in mc config options, but instead I found it once I edit a file with the internal editor, that it has its own config menu. One never ends learning. Not the first time I wonder about the edit backup file with 'mc', this time I found out why there wasn't.
If you want to further debug this, ping me off-list or (maybe better) on IRC. The audit.log entries about reloading the profiles might be helpful.
Thanks. I will concoct a private mail with logs and send them off list, if you have the curiosity to find out what happened.
Ok. Time to have lunch. Later I will update the wiki :-)
Unless you can reproduce the permission problem after re-adding the "#", please remove that note from the wiki again. I would be *very* surprised if that really caused your problem.
Ok, will retest and tell you. Just not now, it is 00 hours here, I just arrived home ;-)
I will now also correct the wiki on this point. -- Cheers / Saludos, Carlos E. R. (from 15.1 x86_64 at Telcontar)