Mailinglist Archive: opensuse-factory (1324 mails)

< Previous Next >
Re: [opensuse-factory] apparmor
  • From: Per Jessen <per@xxxxxxxxxxxx>
  • Date: Tue, 06 Oct 2015 08:45:32 +0200
  • Message-id: <muvqmj$b65$1@saturn.local.net>
Peter Czanik wrote:

On 10/02/2015 04:47 PM, Christian Boltz wrote:
Hello,

Am Freitag, 2. Oktober 2015 schrieb Peter Czanik:
On 10/02/2015 03:54 PM, Marcus Meissner wrote:
On Fri, Oct 02, 2015 at 03:36:06PM +0200, Peter Czanik wrote:
Do I see well, that AppArmor is turned on by default on Leap? It
blocks the start of syslog-ng:

linux-e8yf:~ # syslog-ng -V
Auto configuration failed
140266213013264:error:0200100D:system library:fopen:Permission
denied:bss_file.c:173:fopen('/etc/ssl/openssl.cnf','rb')
If yes, is it OK, if I report it as a 42.1 beta1 bug? I run
42.1-current, but I guess this bug was already in beta1 too...
Of course, please open a bug.
Done: https://bugzilla.opensuse.org/show_bug.cgi?id=948584
Thanks for the bugreport!

A wild guess based on your error message would be to add
#include <abstractions/openssl>
to the /etc/apparmor.d/sbin.syslog-ng profile and to reload it using
rcapparmor reload.

If that doesn't work, syslog-ng might need more permissions. In this
case, please follow the detailed instructions I gave in the
bugreport.
It's not enough. It seems to me, that it needs some extra permissions
related to journald. I could not find anything related to that under
/etc/apparmor.d/ so I rather just posted my audit.log to bugzilla.

FYI, I've been working on the same problem over the weekend.

http://bugzilla.opensuse.org/show_bug.cgi?id=948753


--
Per Jessen, Zürich (14.1°C)
http://www.dns24.ch/ - free dynamic DNS, made in Switzerland.

--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx

< Previous Next >