https://bugzilla.novell.com/show_bug.cgi?id=277380 ------- Comment #8 from joe_morris@ntm.org 2007-05-24 07:51 MST ------- I would assume this is related, but I cannot get it to profile antivir at all. I see info in the auditd.log like this, type=APPARMOR msg=audit(1180010238.110:3615): PERMITTING r access to /usr/lib/locale/en_US.utf8/LC_CTYPE (11395 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010238.110:3616): PERMITTING r access to /usr/lib/locale/en_US.utf8/LC_CTYPE (11395 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010238.110:3617): PERMITTING rw access to /dev/null (11395 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010238.110:3618): PERMITTING r access to /etc/mtab (11395 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010238.110:3619): PERMITTING r access to /tmp/antivir_5753_309574583/download/antivir (11384 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.766:3620): PERMITTING x access to /bin/rm (5753 profile /usr/lib/AntiVir/antivir active /usr/lib/AntiVir/antivir) type=APPARMOR msg=audit(1180010252.766:3621): PERMITTING x access to /bin/rm (11438 profile /usr/lib/AntiVir/antivir active /usr/lib/AntiVir/antivir) type=APPARMOR msg=audit(1180010252.766:3622): LOGPROF-HINT changing_profile (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.766:3623): PERMITTING r access to /bin/rm (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.766:3624): PERMITTING r access to /bin/rm (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.766:3625): PERMITTING r access to /bin/rm (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.766:3626): PERMITTING x access to /lib64/ld-2.5.so (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.766:3627): PERMITTING r access to /lib64/ld-2.5.so (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.770:3628): PERMITTING r access to /bin/rm (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.770:3629): PERMITTING mr access to /bin/rm (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.770:3630): PERMITTING r access to /bin/rm (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.770:3631): PERMITTING mr access to /lib64/ld-2.5.so (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.770:3632): PERMITTING r access to /lib64/ld-2.5.so (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.770:3633): PERMITTING r access to /etc/ld.so.cache (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.770:3634): PERMITTING r access to /etc/ld.so.cache (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.770:3635): PERMITTING r access to /lib64/libc-2.5.so (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.770:3636): PERMITTING mr access to /lib64/libc-2.5.so (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.770:3637): PERMITTING r access to /lib64/libc-2.5.so (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.770:3638): PERMITTING r access to /lib64/libc-2.5.so (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.770:3639): PERMITTING r access to /usr/share/locale/locale.alias (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.770:3640): PERMITTING r access to /usr/lib/locale/en_US.utf8/LC_IDENTIFICATION (11438 profile null-complain-profile active null-complain-profile) type=APPARMOR msg=audit(1180010252.770:3641): PERMITTING r access to /usr/lib/locale/en_US.utf8/LC_IDENTIFICATION (11438 profile null-complain-profile active null-complain-profile) but aa-logprof has no output, i.e. jmorris:/home/joe # aa-logprof Reading log entries from /var/log/audit/audit.log. Updating AppArmor profiles in /etc/apparmor.d. Complain-mode changes: jmorris:/home/joe # I don't even see a null-complain-profile. I have tried deleting it and regenerating it to no avail. I know I did it at work where I am running the 2.6.21-87 kernel. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.