Hello Martin.
Although I'm not getting exact "reweive"-crashes with aa-logprof anymore it still crashed on other similar events:
~# aa-logprof Reading log entries from /var/log/syslog. Updating AppArmor profiles in /etc/apparmor.d. Traceback (most recent call last): File "/usr/lib/python3/dist-packages/apparmor/logparser.py", line 409, in read_log self.add_event_to_tree(event) File "/usr/lib/python3/dist-packages/apparmor/logparser.py", line 206, in add_event_to_tree e = self.parse_event_for_tree(e) File "/usr/lib/python3/dist-packages/apparmor/logparser.py", line 310, in parse_event_for_tree raise AppArmorException(_('Log contains unknown mode %s') % rmask) apparmor.common.AppArmorException: 'Log contains unknown mode senw reweive'
During handling of the above exception, another exception occurred:
Traceback (most recent call last): File "/usr/sbin/aa-logprof", line 50, in <module> apparmor.do_logprof_pass(logmark) File "/usr/lib/python3/dist-packages/apparmor/aa.py", line 2189, in do_logprof_pass log = log_reader.read_log(logmark) File "/usr/lib/python3/dist-packages/apparmor/logparser.py", line 414, in read_log raise AppArmorBug(ex_msg) # py3-only: from None apparmor.common.AppArmorBug: Log contains unknown mode senw reweive
This error was caused by the log line: Jul 29 11:42:05 files kernel: [483212.877816] audit: type=1400 audit(1469785325.122:21021): apparmor="ALLOWED" operation="file_inherit" profile="/usr/bin/nginx-amplify-agent.py//null-/bin/dash" pid=18239 comm="sh" laddr=192.168.10.3 lport=50758 faddr=54.153.70.241 fport=443 family="inet" sock_type="stream" protocol=6 requested_mask="send receive" denied_mask="send receive"
Hello Martin.
Although I'm not getting exact "reweive"-crashes with aa-logprof anymore it still crashed on other similar events:
~# aa-logprof python3/ dist-packages/ apparmor/ logparser. py", line 409, in read_log add_event_ to_tree( event) python3/ dist-packages/ apparmor/ logparser. py", line 206, in add_event_to_tree event_for_ tree(e) python3/ dist-packages/ apparmor/ logparser. py", line 310, in parse_event_ for_tree on(_('Log contains unknown mode %s') % rmask) common. AppArmorExcepti on: 'Log contains unknown mode senw reweive'
Reading log entries from /var/log/syslog.
Updating AppArmor profiles in /etc/apparmor.d.
Traceback (most recent call last):
File "/usr/lib/
self.
File "/usr/lib/
e = self.parse_
File "/usr/lib/
raise AppArmorExcepti
apparmor.
During handling of the above exception, another exception occurred:
Traceback (most recent call last): aa-logprof" , line 50, in <module> do_logprof_ pass(logmark) python3/ dist-packages/ apparmor/ aa.py", line 2189, in do_logprof_pass read_log( logmark) python3/ dist-packages/ apparmor/ logparser. py", line 414, in read_log common. AppArmorBug: Log contains unknown mode senw reweive
File "/usr/sbin/
apparmor.
File "/usr/lib/
log = log_reader.
File "/usr/lib/
raise AppArmorBug(ex_msg) # py3-only: from None
apparmor.
This error was caused by the log line: 5.122:21021) : apparmor="ALLOWED" operation= "file_inherit" profile= "/usr/bin/ nginx-amplify- agent.py/ /null-/ bin/dash" pid=18239 comm="sh" laddr=192.168.10.3 lport=50758 faddr=54.153.70.241 fport=443 family="inet" sock_type="stream" protocol=6 requested_ mask="send receive" denied_mask="send receive"
Jul 29 11:42:05 files kernel: [483212.877816] audit: type=1400 audit(146978532