apt-cacher-ng profile is missing some rules (tcpwrapper and backend configs)

Bug #1133409 reported by Simon Déziel
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
AppArmor Profiles
Fix Released
Undecided
Unassigned

Bug Description

Using the AA profile result in the following denials during startup:

Feb 26 09:20:31 apt kernel: [345183.322578] type=1400 audit(1361888431.203:12): apparmor="DENIED" operation="open" parent=3507 profile="/usr/sbin/apt-cacher-ng" name="/var/lib/apt-cacher-ng/backends_debian.default" pid=3523 comm="apt-cacher-ng" requested_mask="r" denied_mask="r" fsuid=103 ouid=0
Feb 26 09:20:31 apt kernel: [345183.327304] type=1400 audit(1361888431.207:13): apparmor="DENIED" operation="open" parent=3507 profile="/usr/sbin/apt-cacher-ng" name="/etc/hosts.deny" pid=3523 comm="apt-cacher-ng" requested_mask="r" denied_mask="r" fsuid=103 ouid=0
Feb 26 09:20:31 apt kernel: [345183.327316] type=1400 audit(1361888431.207:14): apparmor="DENIED" operation="open" parent=3507 profile="/usr/sbin/apt-cacher-ng" name="/etc/hosts.allow" pid=3523 comm="apt-cacher-ng" requested_mask="r" denied_mask="r" fsuid=103 ouid=0

This affects the profile as shipped in Precise, Quantal and Raring

Related branches

Revision history for this message
intrigeri (intrigeri) wrote :

All these have been fixed, and e.g. apparmor-profiles-extra in Debian Stretch has the fixes..

Changed in apparmor-profiles:
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.